Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Contact Form for WordPress-Ultimate Form Builder Lite includes Backdoor [Only if downloaded via the vendor website] (1.5.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin Contact Form for WordPress-Ultimate Form Builder Lite Multiple Cross-Site Scripting Vulnerabilities (1.3.2)
-
CWE-79
High
WordPress Plugin Contact Form for WordPress-Ultimate Form Builder Lite Multiple Vulnerabilities (1.3.6)
CVE-2017-15919
CWE-915
High
WordPress Plugin Contact Form for WordPress-Ultimate Form Builder Lite Multiple Vulnerabilities (1.3.7)
-
CWE-89
High
WordPress Plugin Contact Form Generator Multiple Cross-Site Request Forgery Vulnerabilities (2.1.86)
CVE-2015-6965
CWE-352
High
WordPress Plugin Contact Form Integrated With Google Maps Cross-Site Scripting (2.4)
CVE-2014-7238
CWE-79
High
WordPress Plugin Contact Form Manager Multiple Cross-Site Scripting Vulnerabilities (1.4.1)
-
CWE-79
High
WordPress Plugin Contact Form Manager Multiple Vulnerabilities (1.4.4)
-
CWE-352
High
WordPress Plugin Contact Form Multi by BestWebSoft Cross-Site Scripting (1.2.0)
CVE-2017-18490
CWE-79
High
WordPress Plugin Contact Form Submissions SQL Injection (1.6.4)
CVE-2021-24125
CWE-89
High
WordPress Plugin Contact Form Submissions Unspecified Vulnerability (1.2)
-
-
High
WordPress Plugin Contact Form Submissions Unspecified Vulnerability (1.6.3)
-
-
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress Cross-Site Scripting (1.4.0)
-
CWE-79
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress Cross-Site Scripting (1.5.6)
CVE-2017-18492
CWE-79
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.0)
CVE-2023-29096
CWE-89
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.1)
CVE-2023-36508
CWE-89
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.2)
CVE-2024-35678
CWE-89
High
WordPress Plugin Contact Form Unspecified Vulnerability (1.1.9)
-
-
High
WordPress Plugin Contact Form Unspecified Vulnerability (1.2)
-
-
High
WordPress Plugin Contact Form Widget-Contact Query, Form Maker SQL Injection (1.0.9)
CVE-2019-17072
CWE-89
High
WordPress Plugin Contact Form With Captcha Cross-Site Request Forgery (1.6.2)
CVE-2021-42358
CWE-352
High
WordPress Plugin Contact Form X Cross-Site Scripting (2.4)
CVE-2022-25601
CWE-79
High
WordPress Plugin Contact Form, Drag and Drop Form Builder for WordPress-Everest Forms SQL Injection (1.4.9)
CVE-2019-13575
CWE-89
High
WordPress Plugin Contact Form, Survey & Popup Form for WordPress-ARForms Form Builder Cross-Site Scripting (1.4)
CVE-2021-24718
CWE-79
High
WordPress Plugin Contact Form-Fastest Contact Form Builder Plugin for WordPress by Fluent Forms Cross-Site Request Forgery (3.6.66)
CVE-2021-34620
CWE-352
High
WordPress Plugin Contact Form-Form builder with drag & drop for WordPress by Kali Forms Security Bypass (2.1.1)
-
CWE-264
High
WordPress Plugin Contact List-Easy Business Directory, Staff Directory and Address Book Cross-Site Scripting (2.9.41)
-
CWE-79
High
WordPress Plugin Content Audit Blind SQL Injection (1.6)
CVE-2014-5389
CWE-89
High
WordPress Plugin Content Audit Multiple Vulnerabilities (1.9.1)
-
CWE-352
High
WordPress Plugin Content Aware Sidebars-Unlimited Widget Areas Security Bypass (3.8)
-
CWE-264
High
WordPress Plugin Content Blocks (Custom Post Widget) Cross-Site Scripting (3.0)
-
CWE-79
High
WordPress Plugin Content Blocks (Custom Post Widget) Local File Inclusion (3.3.0)
CVE-2024-3564
CWE-22
High
WordPress Plugin Content Cards Cross-Site Scripting (0.9.6)
CVE-2017-17096
CWE-79
High
WordPress Plugin Content Control-User Access Restriction Cross-Site Scripting (1.1.9)
CVE-2022-4509
CWE-79
High
WordPress Plugin Content Copy Protection & Prevent Image Save Cross-Site Request Forgery (1.3)
CVE-2021-24333
CWE-352
High
WordPress Plugin Content Grabber Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Content Staging Cross-Site Scripting (2.0.1)
CVE-2021-39356
CWE-79
High
WordPress Plugin Content text slider on post Cross-Site Scripting (6.8)
-
CWE-79
High
WordPress Plugin Content Timeline Multiple SQL Injection Vulnerabilities (4.4.2)
CVE-2017-14507
CWE-89
High
WordPress Plugin Contentboxes Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin ContentStudio Multiple Vulnerabilities (1.2.5)
CVE-2023-0558
CWE-862
High
WordPress Plugin Contest Gallery-Photo Contest for WordPress Cross-Site Request Forgery (10.4.1.1)
CVE-2019-5974
CWE-352
High
WordPress Plugin Contest Gallery-Photo Contest for WordPress Cross-Site Scripting (13.1.0.9)
-
CWE-79
High
WordPress Plugin Contest Gallery-Photo Contest for WordPress Cross-Site Scripting (14.1.7)
-
CWE-79
High
WordPress Plugin Contest Gallery-Photo Contest for WordPress Security Bypass (13.1.0.6)
-
CWE-264
High
WordPress Plugin Contest Gallery-Photo Contest for WordPress SQL Injection (13.1.0.5)
CVE-2021-24915
CWE-89
High
WordPress Plugin Contextual Adminbar Color Cross-Site Scripting (0.2)
-
CWE-79
High
WordPress Plugin Contextual Related Posts Cross-Site Request Forgery (1.8.6)
CVE-2013-2710
CWE-352
High
WordPress Plugin Contextual Related Posts Cross-Site Request Forgery (2.9.3)
-
CWE-352
High
WordPress Plugin Contextual Related Posts Cross-Site Scripting (3.3.0)
CVE-2023-0252
CWE-79
High
WordPress Plugin Contextual Related Posts Multiple Vulnerabilities (3.3.1)
-
CWE-862
High
WordPress Plugin Controlled Admin Access Security Bypass (1.4.0)
CVE-2021-24215
CWE-284
High
WordPress Plugin Controlled Admin Access Security Bypass (1.5.5)
-
CWE-264
High
WordPress Plugin Contus HD FLV Player 'process-sortable.php' SQL Injection (1.3)
-
CWE-89
High
WordPress Plugin Contus HD FLV Player 'uploadVideo.php' Arbitrary File Upload (1.7)
-
CWE-434
High
WordPress Plugin CONTUS VBLOG-Video Blogging 'save.php' Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Conversador Cross-Site Scripting (2.61)
CVE-2014-4519
CWE-79
High
WordPress Plugin Convert Docx2post Arbitrary File Upload (1.4)
-
CWE-434
High
WordPress Plugin Convert Plus Security Bypass (3.4.2)
-
CWE-264
High
WordPress Plugin Convert Plus Security Bypass (3.4.4)
CVE-2019-15863
CWE-264
High
WordPress Plugin Convert Plus Unspecified Vulnerability (3.5.6)
-
-
High
WordPress Plugin Cooked Pro Cross-Site Scripting (1.7.5.5)
CVE-2021-24233
CWE-79
High
WordPress Plugin Cooked-Recipe Cross-Site Scripting (1.7.9)
-
CWE-79
High
WordPress Plugin Cookie Bar Cross-Site Scripting (1.8.8)
-
CWE-79
High
WordPress Plugin Cookie Consent for WP-Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) Cross-Site Scripting (3.2.0)
CVE-2024-4869
CWE-79
High
WordPress Plugin Cookie Consent for WP-Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) CSV Injection (2.2.5)
CVE-2023-23678
CWE-1236
High
WordPress Plugin Cookie Consent for WP-Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) Security Bypass (3.0.2)
CVE-2024-3599
CWE-862
High
WordPress Plugin Cookie Information-Free GDPR Consent Solution Cross-Site Scripting (1.5.5)
-
CWE-79
High
WordPress Plugin Cookie Information-Free GDPR Consent Solution Privilege Escalation (1.4.2)
CVE-2018-19207
CWE-264
High
WordPress Plugin Cookie Information-Free GDPR Consent Solution Security Bypass (2.0.22)
CVE-2023-6700
CWE-862
High
WordPress Plugin Cookie Law Bar Cross-Site Scripting (1.2.1)
-
CWE-79
High
WordPress Plugin Cookie Notice & Compliance for GDPR/CCPA Cross-Site Scripting (2.1.1)
CVE-2021-24569
CWE-79
High
WordPress Plugin Cookie Notice & Consent Banner for GDPR & CCPA Compliance Cross-Site Scripting (1.7.1)
CVE-2021-24590
CWE-79
High
WordPress Plugin Cookie Notification for WordPress-WP Cookie User Info includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Cookiebot-GDPR/CCPA Compliant Cookie Consent and Control Cross-Site Scripting (3.6.0)
-
CWE-79
High