Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Count per Day 'userperspan.php' Multiple Cross-Site Scripting Vulnerabilities (3.1.1)
CVE-2012-3434
CWE-79
High
WordPress Plugin Count per Day Arbitrary File Download and Cross-Site Scripting Vulnerabilities (3.1)
CVE-2012-0896
CWE-79
High
WordPress Plugin Count per Day Cross-Site Request Forgery (3.2.5)
-
CWE-352
High
WordPress Plugin Count per Day Information Disclosure (3.2.5)
-
CWE-200
High
WordPress Plugin Count per Day Multiple Cross-Site Scripting Vulnerabilities (3.5.4)
-
CWE-79
High
WordPress Plugin Count per Day Multiple Vulnerabilities (3.5.6)
-
CWE-352
High
WordPress Plugin Count per Day Search Bar Cross-Site Scripting (3.2.2)
-
CWE-79
High
WordPress Plugin Count per Day SQL Injection (3.4)
CVE-2015-5533
CWE-89
High
WordPress Plugin Countdown and CountUp, WooCommerce Sales Timer Cross-Site Request Forgery (1.5.7)
CVE-2021-34636
CWE-352
High
WordPress Plugin Countdown Block Security Bypass (1.1.1)
CVE-2021-24633
CWE-264
High
WordPress Plugin Country State City Dropdown CF7 Security Bypass (2.7.1)
CVE-2024-3520
CWE-862
High
WordPress Plugin Country State City Dropdown CF7 SQL Injection (2.7.2)
CVE-2024-3495
CWE-89
High
WordPress Plugin Coupon Creator Cross-Site Request Forgery (3.1)
-
CWE-352
High
WordPress Plugin Coupon Tab for DirectoryPress Multiple Cross-Site Scripting Vulnerabilities (0.2.0)
-
CWE-79
High
WordPress Plugin Couponer 'print-coupon.php' SQL Injection (1.2)
-
CWE-89
High
WordPress Plugin CP Contact Form with PayPal Cross-Site Scripting (1.2.97)
CVE-2019-14784
CWE-79
High
WordPress Plugin CP Contact Form with PayPal Cross-Site Scripting (1.2.98)
CVE-2019-14785
CWE-79
High
WordPress Plugin CP Contact Form with PayPal Multiple Vulnerabilities (1.1.5)
-
CWE-352
High
WordPress Plugin CP Image Store with Slideshow Arbitrary File Download (1.0.5)
-
CWE-22
High
WordPress Plugin CP Reservation Calendar SQL Injection (1.1.6)
CVE-2015-7235
CWE-89
High
WordPress Plugin CPT Bootstrap Carousel Cross-Site Scripting (1.12)
CVE-2022-4834
CWE-79
High
WordPress Plugin Crafty Social Buttons Cross-Site Scripting (1.5.6)
-
CWE-79
High
WordPress Plugin Craw Data Server-Side Request Forgery (1.0.0)
CVE-2022-2912
CWE-918
High
WordPress Plugin Crayon Syntax Highlighter 'wp_load' Parameter Remote File Include (1.12.1)
-
CWE-94
High
WordPress Plugin Crayon Syntax Highlighter Local File Disclosure (2.6.10)
-
CWE-22
High
WordPress Plugin Crayon Syntax Highlighter Security Bypass (2.6.10)
-
CWE-264
High
WordPress Plugin Crazy Bone Cross-Site Scripting (0.5.6)
-
CWE-79
High
WordPress Plugin Creative Contact Form-The Best WordPress Contact Form Builder Arbitrary File Upload (0.9.7)
CVE-2014-7969
CWE-94
High
WordPress Plugin Credova_Financial Information Disclosure (1.4.8)
CVE-2021-39342
CWE-200
High
WordPress Plugin Crelly Slider Arbitrary File Upload (1.3.4)
CVE-2019-15866
CWE-434
High
WordPress Plugin Crelly Slider Multiple Unspecified Vulnerabilities (1.1.1)
-
-
High
WordPress Plugin Crisp Live Chat Cross-Site Request Forgery (0.31)
CVE-2021-43353
CWE-352
High
WordPress Plugin Crony Cronjob Manager Multiple Vulnerabilities (0.4.4)
CVE-2017-14530
CWE-352
High
WordPress Plugin Cross-RSS Directory Traversal (1.7)
CVE-2014-4941
CWE-22
High
WordPress Plugin CrossSlide jQuery Multiple Vulnerabilities (2.0.5)
CVE-2015-2089
CWE-352
High
WordPress Plugin Crowd Ideas Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Cryptocurrency Donation Box-Bitcoin & Crypto Donations Security Bypass (1.7)
-
CWE-94
High
WordPress Plugin Cryptocurrency Widgets For Elementor Security Bypass (1.2.1)
-
CWE-94
High
WordPress Plugin Cryptocurrency Widgets Pack SQL Injection (1.8.1)
CVE-2022-4059
CWE-89
High
WordPress Plugin Cryptocurrency Widgets-Price Ticker & Coins List Security Bypass (2.4)
-
CWE-94
High
WordPress Plugin CSS & JavaScript Toolbox SQL Injection (9.2)
-
CWE-89
High
WordPress Plugin CSS Hero Cross-Site Scripting (4.03)
CVE-2019-19133
CWE-79
High
WordPress Plugin CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce Cross-Site Request Forgery (2.4.49)
CVE-2022-47154
CWE-352
High
WordPress Plugin CSS Plus Multiple Unspecified Vulnerabilities (1.3.1)
-
-
High
WordPress Plugin CSV Import Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Csv Import-Export Multiple Cross-Site Scripting Vulnerabilities (1.1.0)
CVE-2017-17753
CWE-79
High
WordPress Plugin CSV Importer Multiple Unspecified Vulnerabilities (0.3.7)
-
-
High
WordPress Plugin Csv2WPeC Coupon Arbitrary File Upload (1.1)
CVE-2015-1000013
CWE-434
High
WordPress Plugin CTA for WordPress-Easy Side Tab includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Currency Switcher for WooCommerce Security Bypass (2.11.1)
CVE-2019-18668
CWE-264
High
WordPress Plugin Current Book Cross-Site Scripting (1.0.1)
CVE-2021-24538
CWE-79
High
WordPress Plugin Custom 404 Pro Cross-Site Request Forgery (3.7.1)
CVE-2023-0385
CWE-352
High
WordPress Plugin Custom 404 Pro Cross-Site Scripting (3.2.7)
CVE-2019-15838
CWE-79
High
WordPress Plugin Custom 404 Pro Cross-Site Scripting (3.2.8)
CVE-2019-14789
CWE-79
High
WordPress Plugin Custom 404 Pro Unspecified Vulnerability (3.7.0)
-
-
High
WordPress Plugin Custom Add User Cross-Site Scripting (2.0.2)
CVE-2023-0043
CWE-79
High
WordPress Plugin Custom Admin Page by BestWebSoft Cross-Site Scripting (0.1.1)
CVE-2017-18493
CWE-79
High
WordPress Plugin Custom Background 'uploadify.php' Arbitrary File Upload (1.01)
-
CWE-434
High
WordPress Plugin Custom Banners Cross-Site Request Forgery (3.2.2)
-
CWE-352
High
WordPress Plugin Custom Banners Cross-Site Scripting (1.2.2.2)
CVE-2014-4724
CWE-79
High
WordPress Plugin Custom Body Class Cross-Site Request Forgery (0.6.0)
-
CWE-352
High
WordPress plugin Custom Contact Forms critical vulnerability
-
CWE-287
High
WordPress Plugin Custom Contact Forms Multiple Cross-Site Scripting Vulnerabilities (5.0.0.1)
-
CWE-79
High
WordPress Plugin Custom Contact Forms Security Bypass (5.1.0.3)
-
CWE-264
High
WordPress Plugin Custom Content Type Manager 'upload_form.php' Arbitrary File Upload (0.9.5.13)
-
CWE-434
High
WordPress Plugin Custom Content Type Manager Backdoor (0.9.8.8)
-
CWE-95
High
WordPress Plugin Custom Content Type Manager Remote Code Execution (0.9.8.5)
CVE-2015-3173
CWE-94
High
WordPress Plugin Custom CSS Pro Cross-Site Request Forgery (1.0.3)
CVE-2019-5984
CWE-352
High
WordPress Plugin Custom css-js-php Cross-Site Request Forgery (2.0.7)
-
CWE-352
High
WordPress Plugin Custom css-js-php Unspecified Vulnerability (2.0.2)
-
-
High
WordPress Plugin Custom Dashboard & Login Page-AGCA Cross-Site Request Forgery (6.5.4)
-
CWE-352
High
WordPress Plugin Custom Dashboard & Login Page-AGCA Cross-Site Scripting (6.9.1)
CVE-2021-36823
CWE-79
High
WordPress Plugin Custom Dashboard & Login Page-AGCA Multiple Unspecified Vulnerabilities (1.5.4.2)
-
-
High
WordPress Plugin Custom Field Suite Cross-Site Request Forgery (2.5.15)
-
CWE-352
High
WordPress Plugin Custom Field Suite Cross-Site Scripting (2.5.14)
CVE-2019-11871
CWE-79
High