Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin One page checkout and layouts for woocommerce Unspecified Vulnerability (2.7)
-
-
High
WordPress Plugin One User Avatar-User Profile Picture Multiple Vulnerabilities (2.3.6)
CVE-2021-24675
CWE-352
High
WordPress Plugin One User Avatar-User Profile Picture Unspecified Vulnerability (2.3.8)
-
-
High
WordPress Plugin OneClick Chat to Order Cross-Site Scripting (1.0.4.1)
CVE-2022-4760
CWE-79
High
WordPress Plugin OneLogin SAML SSO Security Bypass (2.2.0)
-
CWE-287
High
WordPress Plugin OneLogin SAML SSO Unspecified Vulnerability (2.1.8)
-
-
High
WordPress Plugin OnePress Social Locker Multiple Cross-Site Scripting Vulnerabilities (4.2.0)
-
CWE-79
High
WordPress Plugin OnePress Social Locker Multiple Unspecified Vulnerabilities (4.2.5)
-
-
High
WordPress Plugin OneSignal-Web Push Notifications Cross-Site Scripting (1.17.7)
CVE-2019-15827
CWE-79
High
WordPress Plugin Online Hotel Booking System Pro Cross-Site Scripting (1.1)
CVE-2020-15536
CWE-79
High
WordPress Plugin Online Hotel Booking System Pro SQL Injection (1.0)
-
CWE-89
High
WordPress Plugin Online Lesson Booking Multiple Vulnerabilities (0.8.6)
CVE-2019-5973
CWE-352
High
WordPress Plugin Ooorl Cross-Site Scripting (1.0.0)
CVE-2014-4542
CWE-79
High
WordPress Plugin Opal Estate Cross-Site Request Forgery (1.6.11)
-
CWE-352
High
WordPress Plugin Open Graph for Facebook, Google+ and Twitter Card Tags Cross-Site Scripting (2.2.4)
CVE-2018-0579
CWE-79
High
WordPress Plugin Open Graph for Facebook, Google+ and Twitter Card Tags Unspecified Vulnerability (2.2.4.1)
-
-
High
WordPress Plugin open-flash-chart-core Remote Code Execution (0.4)
CVE-2009-4140
CWE-434
High
WordPress Plugin OpenID Connect Generic Client Cross-Site Scripting (3.8.1)
CVE-2021-24214
CWE-79
High
WordPress Plugin Opening Hours Cross-Site Scripting (2.3.0)
CVE-2022-4752
CWE-79
High
WordPress Plugin OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) Cross-Site Scripting (1.1.1)
CVE-2024-30450
CWE-79
High
WordPress Plugin OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) Supply Chain Attack [Polyfill.io] (1.1.2)
-
CWE-1372
High
WordPress Plugin OPS Old Post Spinner 'ops_file' Parameter Local File Include (2.2.1)
-
CWE-22
High
WordPress Plugin Optimize images ALT Text (alt tag) & names for SEO using AI Cross-Site Request Forgery (2.0.7)
CVE-2022-4548
CWE-352
High
WordPress Plugin OptionTree Cross-Site Scripting (2.5.3)
-
CWE-79
High
WordPress Plugin OptionTree Cross-Site Scripting (2.5.5)
-
CWE-79
High
WordPress Plugin OptionTree PHP Object Injection (2.6.0)
CVE-2019-15319
CWE-915
High
WordPress Plugin OptionTree PHP Object Injection (2.7.2)
CVE-2019-15321
CWE-915
High
WordPress Plugin oQey Gallery 'gal_id' Parameter SQL Injection (0.4.8)
-
CWE-89
High
WordPress Plugin oQey Gallery 'tbpv_domain' Parameter Cross-Site Scripting (0.2)
-
CWE-79
High
WordPress Plugin oQey Headers 'oqey_settings.php' SQL Injection (0.3)
-
CWE-89
High
WordPress Plugin Orbit Fox by ThemeIsle Multiple Vulnerabilities (2.10.2)
-
CWE-264
High
WordPress Plugin Order Export & Order Import for WooCommerce Cross-Site Request Forgery (1.6.0)
-
CWE-352
High
WordPress Plugin Order Export & Order Import for WooCommerce Information Disclosure (1.0.8)
-
CWE-200
High
WordPress Plugin Order XML File Export Import for WooCommerce Cross-Site Request Forgery (1.3.0)
-
CWE-352
High
WordPress Plugin Organizer Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities (1.2.1)
CVE-2012-6512
CWE-200
High
WordPress Plugin OSD Subscribe Cross-Site Scripting (1.2.3)
CVE-2021-38351
CWE-79
High
WordPress Plugin OSM-OpenStreetMap SQL Injection (6.0.2)
CVE-2024-3604
CWE-89
High
WordPress Plugin Otter-Gutenberg Blocks-Page Builder for Gutenberg Editor & FSE PHAR Deserialization (2.2.5)
CVE-2023-2288
CWE-502
High
WordPress Plugin Our Team Showcase Cross-Site Request Forgery (1.2)
CVE-2014-9523
CWE-352
High
WordPress Plugin P3 (Plugin Performance Profiler) Cross-Site Scripting (1.5.3.8)
-
CWE-79
High
WordPress Plugin Package Quantity Discount Security Bypass (1.1.2)
-
CWE-264
High
WordPress Plugin Page and Post Clone Information Disclosure (1.1)
-
CWE-200
High
WordPress Plugin Page Animations And Transitions Unspecified Vulnerability (2.1.8)
-
-
High
WordPress Plugin Page Builder by SiteOrigin Cross-Site Request Forgery (2.10.15)
CVE-2020-13643
CWE-352
High
WordPress Plugin Page Builder by SiteOrigin Cross-Site Scripting (2.0.4)
-
CWE-79
High
WordPress Plugin Page Builder, Website Builder:Simply Symphony! & Flux Live!-Full Drag And Drop Front End Vi Cross-Site Scripting (0.2.7.9)
-
CWE-79
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Arbitrary File Upload (2.7.4)
-
CWE-434
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Cross-Site Scripting (2.7.6)
-
CWE-79
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Cross-Site Scripting (2.7.9)
CVE-2019-9910
CWE-79
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Cross-Site Scripting (2.8.2)
-
CWE-79
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Cross-Site Scripting (2.9.4)
CVE-2020-15299
CWE-79
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Multiple Vulnerabilities (2.9.2)
-
CWE-264
High
WordPress Plugin Page Builder:Live Composer Cross-Site Scripting (1.5.22)
CVE-2022-4669
CWE-79
High
WordPress Plugin Page Builder:PageLayer-Drag and Drop website builder Cross-Site Request Forgery (1.1.1)
CVE-2020-35947
CWE-352
High
WordPress Plugin Page Builder:PageLayer-Drag and Drop website builder Cross-Site Scripting (1.3.4)
-
CWE-79
High
WordPress Plugin Page Flip Image Gallery 'book_id' Parameter Remote File Disclosure (0.2.2)
CVE-2008-5752
CWE-22
High
WordPress Plugin Page Generator Cross-Site Scripting (1.5.8)
-
CWE-79
High
WordPress Plugin Page Restrict Cross-Site Scripting (2.2.1)
-
CWE-79
High
WordPress Plugin Page Restrict Open Redirect (2.2.3)
-
CWE-601
High
WordPress Plugin Page Showcaser Boxes Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Page Visit Counter SQL Injection (4.0.9)
-
CWE-89
High
WordPress Plugin Page-list Cross-Site Scripting (5.2)
CVE-2022-4485
CWE-79
High
WordPress Plugin Pagination by BestWebSoft Cross-Site Scripting (1.0.6)
CVE-2017-18527
CWE-79
High
WordPress Plugin Paid Business Listings Blind SQL Injection (1.0.2)
-
CWE-89
High
WordPress Plugin Paid Downloads 'download_key' Parameter SQL Injection (2.01)
-
CWE-89
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (1.9.18)
-
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (3.1.10)
CVE-2021-24522
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (3.2.15)
-
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (4.5.3)
CVE-2023-23996
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (4.5.4)
CVE-2023-23820
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Multiple Cross-Site Scripting Vulnerabilities (3.2.2)
CVE-2021-24955
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Multiple Cross-Site Scripting Vulnerabilities (4.5.0)
CVE-2022-4698
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Multiple Vulnerabilities (3.1.3)
CVE-2021-34624
CWE-434
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress PHP Object Injection (4.3.2)
CVE-2022-45083
CWE-915
High
WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions Insecure Direct Object Reference (3.0.4)
CVE-2024-37277
CWE-639
High