Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Hot Files:File Sharing and Download Manager Cross-Site Scripting (1.0.0)
CVE-2014-4588
CWE-79
High
WordPress Plugin Hotjar Connecticator Cross-Site Scripting (1.1.1)
CVE-2021-24301
CWE-79
High
WordPress Plugin Hover Effects Builder Free Cross-Site Scripting (1.0.3)
-
CWE-79
High
WordPress Plugin How to Create an App for Android iPhone Easytouch Arbitrary File Upload (3.0)
CVE-2017-1002000
CWE-434
High
WordPress Plugin HT Mega-Absolute Addons for Elementor Page Builder Multiple Cross-Site Scripting Vulnerabilities (1.5.5)
CVE-2021-24261
CWE-79
High
WordPress Plugin HT Slider Range for Amazon affiliates Cross-Site Scripting (1.1.5)
CVE-2021-30134
CWE-79
High
WordPress Plugin Htaccess by BestWebSoft Cross-Site Request Forgery (1.8.1)
CVE-2020-8658
CWE-352
High
WordPress Plugin Htaccess by BestWebSoft Cross-Site Scripting (1.4)
-
CWE-79
High
WordPress Plugin Htaccess by BestWebSoft Cross-Site Scripting (1.7.5)
CVE-2017-18496
CWE-79
High
WordPress Plugin Html5 Audio Player-Audio Player for WordPress Cross-Site Scripting (2.1.2)
CVE-2021-24412
CWE-79
High
WordPress Plugin HTML5 AV Manager for WordPress 'custom.php' Arbitrary File Upload (0.2.7)
-
CWE-434
High
WordPress Plugin HTML5 jQuery Audio Player Multiple Cross-Site Scripting Vulnerabilities (2.3)
-
CWE-79
High
WordPress Plugin HTML5 Lyrics Karaoke Player Cross-Site Scripting (1.06)
-
CWE-79
High
WordPress Plugin HTML5 Maps Cross-Site Request Forgery (1.6.5.6)
CVE-2019-5983
CWE-352
High
WordPress Plugin HTML5 MP3 Player with Playlist Free Information Disclosure (2.6)
CVE-2014-9177
CWE-200
High
WordPress Plugin HTML5 Video Player with Playlist Multiple Cross-Site Scripting Vulnerabilities (2.40)
CVE-2014-4534
CWE-79
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block Cross-Site Scripting (2.5.18)
CVE-2023-6485
CWE-79
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.24)
CVE-2024-1061
CWE-89
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.26)
CVE-2024-5522
CWE-89
High
WordPress Plugin HTTP Headers Multiple Vulnerabilities (1.9.1)
-
CWE-918
High
WordPress Plugin http:BL Multiple Vulnerabilities (1.9.1)
-
CWE-352
High
WordPress Plugin HubSpot All-In-One Marketing-Forms, Popups, Live Chat Cross-Site Scripting (7.5.5)
-
CWE-79
High
WordPress Plugin Hueman Addons Cross-Site Scripting (2.3.3)
CVE-2022-4784
CWE-79
High
WordPress Plugin Human Presence Cross-Site Scripting (2.0.8)
-
CWE-79
High
WordPress Plugin Hungred Post Thumbnail 'hpt_file_upload.php' Arbitrary File Upload (2.1.9)
-
CWE-434
High
WordPress Plugin Hunk External Links Cross-Site Scripting (3.0.5)
-
CWE-79
High
WordPress Plugin Hupso Share Buttons for Twitter, Facebook & Google+ Multiple Unspecified Vulnerabilities (4.0.3)
-
-
High
WordPress Plugin Husker Portfolio Cross-Site Request Forgery (0.3)
-
CWE-352
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Multiple Vulnerabilities (1.1.4.2)
-
CWE-434
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Multiple Vulnerabilities (1.1.9)
CVE-2018-8711
CWE-94
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce SQL Injection (1.3.6)
CVE-2024-6457
CWE-89
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Unspecified Vulnerability (1.2.6)
-
-
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Unspecified Vulnerability (1.2.6.1)
-
-
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Unspecified Vulnerability (1.2.6.2)
-
-
High
WordPress Plugin Hustle-Pop-Ups, Slide-ins and Email Opt-ins Cross-Site Scripting (4.7.0.5)
-
CWE-79
High
WordPress Plugin Hustle-Pop-Ups, Slide-ins and Email Opt-ins CSV Injection (6.0.7)
CVE-2019-11872
CWE-20
High
WordPress Plugin HyperComments Arbitrary File Deletion (1.2.2)
-
CWE-73
High
WordPress Plugin I Recommend This SQL Injection (3.7.2)
-
CWE-89
High
WordPress Plugin I Recommend This SQL Injection (3.7.7)
-
CWE-89
High
WordPress Plugin IBPS Online Exam Multiple Vulnerabilities (1.0)
-
CWE-89
High
WordPress Plugin IBS Mappro Arbitrary File Download (0.6)
CVE-2015-5472
CWE-22
High
WordPress Plugin Ibtana-Ecommerce Product Addons Cross-Site Scripting (0.2.3)
-
CWE-79
High
WordPress Plugin Icon Widget Cross-Site Scripting (1.2.6)
CVE-2022-4763
CWE-79
High
WordPress Plugin Icons with Links Widget Cross-Site Scripting (1.2)
CVE-2021-24435
CWE-79
High
WordPress Plugin iCopyright Toolbar 'icopyright_xml.php' SQL Injection (1.1.4)
-
CWE-89
High
WordPress Plugin ICustomizer Cross-Site Scripting (1.4.13)
CVE-2021-24435
CWE-79
High
WordPress Plugin If>So Dynamic Content Unspecified Vulnerability (1.4.1)
-
-
High
WordPress Plugin iFlyChat-WordPress Chat Cross-Site Scripting (4.6.4)
CVE-2021-24343
CWE-79
High
WordPress Plugin iFrame Admin Pages 'url' Parameter Cross-Site Scripting (0.1)
-
CWE-79
High
WordPress Plugin iframe Cross-Site Scripting (3.0)
-
CWE-79
High
WordPress Plugin iframe Cross-Site Scripting (4.0)
-
CWE-79
High
WordPress Plugin iframe Cross-Site Scripting (4.4)
CVE-2020-12696
CWE-79
High
WordPress Plugin IGIT Posts Slider Widget 'src' Parameter Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin IGIT Posts Slider Widget TimThumb Arbitrary File Upload (1.1)
CVE-2011-4106
CWE-20
High
WordPress Plugin IGIT Related Posts With Thumb Image After Posts TimThumb Arbitrary File Upload (3.9.7)
CVE-2011-4106
CWE-20
High
WordPress Plugin IgniteUp-Coming Soon and Maintenance Mode Multiple Vulnerabilities (3.4)
CVE-2019-17237
CWE-352
High
WordPress Plugin IgnitionDeck Security Bypass (1.1.6)
-
CWE-264
High
WordPress Plugin iLive-Intelligent WordPress Live Chat Support Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin Image Export Arbitrary File Download (1.1.0)
CVE-2015-5609
CWE-22
High
WordPress Plugin Image Gallery with Slideshow 'upload-file.php' Arbitrary File Upload (1.5)
-
CWE-20
High
WordPress Plugin Image Gallery with Slideshow Multiple Vulnerabilities (1.5.2)
CVE-2017-1002015
CWE-89
High
WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (1.4.0)
-
CWE-79
High
WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (1.5.1)
-
CWE-79
High
WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (1.7.0)
-
CWE-79
High
WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (2.0.5)
-
CWE-79
High
WordPress Plugin Image Gallery-Responsive Photo Gallery Multiple Unspecified Vulnerabilities (1.9.58)
-
-
High
WordPress Plugin Image Gallery-Responsive Photo Gallery SQL Injection (1.0.6)
CVE-2014-7153
CWE-89
High
WordPress Plugin Image Gallery-Responsive Photo Gallery SQL Injection (1.8.9)
CVE-2016-11018
CWE-89
High
WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Cross-Site Scripting (9.7.0)
CVE-2021-25031
CWE-79
High
WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Cross-Site Scripting (9.7.1)
CVE-2022-29424
CWE-79
High
WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Cross-Site Scripting (9.8.4)
CVE-2022-4207
CWE-79
High
WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Multiple Cross-Site Scripting Vulnerabilities (9.7.3)
CVE-2022-2937
CWE-79
High
WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Security Bypass (9.6.1)
CVE-2021-36888
CWE-862
High
WordPress Plugin Image Hover Effects-Elementor Addon Multiple Cross-Site Scripting Vulnerabilities (1.3.3)
CVE-2021-24264
CWE-79
High
WordPress Plugin Image Intense SQL Injection (3.2.5)
-
CWE-89
High