Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin jRSS Widget 'url' Parameter Directory Traversal (1.1.1)
-
CWE-22
High
WordPress Plugin jRSS Widget Server-Side Request Forgery (1.2)
CVE-2014-9292
CWE-918
High
WordPress Plugin JS Help Desk (formerly JS Support Ticket) SQL Injection (2.1.0)
-
CWE-89
High
WordPress Plugin JS Job Manager Security Bypass (1.1.8)
-
CWE-264
High
WordPress Plugin JS Job Manager Unspecified Vulnerability (1.0.9)
-
-
High
WordPress Plugin JS MultiHotel Cross-Site Scripting (2.2.1)
CVE-2013-7419
CWE-79
High
WordPress Plugin JS MultiHotel Multiple Vulnerabilities (2.2.1)
CVE-2014-100009
CWE-200
High
WordPress Plugin JS Support Ticket Unspecified Vulnerability (1.1.1)
-
-
High
WordPress Plugin Js-appointment 'searchdata.php' SQL Injection (1.5)
-
CWE-89
High
WordPress Plugin JSM file_get_contents() Shortcode Server-Side Request Forgery (2.7.0)
CVE-2023-6991
CWE-918
High
WordPress Plugin JSmol2WP Multiple Vulnerabilities (1.07)
CVE-2018-20463
CWE-538
High
WordPress Plugin JSON API Open Redirect (1.1.3)
-
CWE-601
High
WordPress Plugin JSON API User Privilege Escalation (3.9.3)
CVE-2024-6624
CWE-269
High
WordPress Plugin JSON API User Unspecified Vulnerability (3.9.6)
-
-
High
WordPress Plugin JSON Content Importer Cross-Site Scripting (1.3.15)
CVE-2023-25485
CWE-79
High
WordPress Plugin Jssor Slider Arbitrary File Upload (1.3)
-
CWE-434
High
WordPress Plugin JTRT Responsive Tables SQL Injection (4.1)
-
CWE-89
High
WordPress Plugin Judge.me Product Reviews for WooCommerce Cross-Site Scripting (1.3.20)
CVE-2023-0061
CWE-79
High
WordPress Plugin Juiz Social Post Sharer Multiple Cross-Site Scripting Vulnerabilities (1.3.3.7)
-
CWE-79
High
WordPress Plugin JupiterX Core Multiple Vulnerabilities (2.0.6)
CVE-2022-1659
CWE-400
High
WordPress Plugin JupiterX Core Privilege Escalation (2.0.7)
CVE-2022-1654
CWE-264
High
WordPress Plugin JupiterX Core Security Bypass (2.0.6)
CVE-2022-1656
CWE-264
High
WordPress Plugin Justified Gallery Cross-Site Scripting (1.7.0)
CVE-2022-4651
CWE-79
High
WordPress Plugin Justified Gallery Unspecified Vulnerability (1.4.1)
-
-
High
WordPress Plugin JVM WooCommerce Wishlist Unspecified Vulnerability (1.2.6)
-
-
High
WordPress Plugin JW Player 6 Cross-Site Scripting (2.1.14)
-
CWE-79
High
WordPress Plugin JW Player for Flash & HTML5 Video Cross-Site Request Forgery (2.1.11)
-
CWE-352
High
WordPress Plugin JW Player for Flash & HTML5 Video Cross-Site Request Forgery (2.1.3)
CVE-2014-4030
CWE-352
High
WordPress Plugin Kadence WooCommerce Email Designer PHP Object Injection (1.5.6)
CVE-2022-3335
CWE-915
High
WordPress Plugin Kama Click Counter Cross-Site Scripting (3.4.9)
CVE-2017-18615
CWE-79
High
WordPress Plugin Kama Click Counter SQL Injection (3.4.9)
CVE-2017-18614
CWE-89
High
WordPress Plugin Kama WP Smiles Unspecified Vulnerability (1.8.1)
-
-
High
WordPress Plugin Kanzu Support Desk-WordPress Helpdesk Remote Code Execution (2.4.6)
-
CWE-94
High
WordPress Plugin Katalyst TimThumb 'timthumb.php' Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin KBoard Multiple Vulnerabilities (3.3)
-
CWE-89
High
WordPress Plugin Keep Backup Daily Cross-Site Scripting (2.0.2)
CVE-2022-1820
CWE-79
High
WordPress Plugin Keep Backup Daily Unspecified Vulnerability (2.0.3)
-
-
High
WordPress Plugin Kento Post View Counter Multiple Vulnerabilities (2.8)
-
CWE-352
High
WordPress Plugin Ketchup Restaurant Reservations Multiple Vulnerabilities (1.0.0)
CVE-2022-2754
CWE-89
High
WordPress Plugin Keydatas Arbitrary File Upload (2.5.2)
CVE-2024-6220
CWE-434
High
WordPress Plugin Keyring Cross-Site Scripting (1.5)
-
CWE-79
High
WordPress Plugin Keyword Meta Cross-Site Request Forgery (3.0)
CVE-2021-24611
CWE-352
High
WordPress Plugin Keyword Strategy Internal Links Multiple Cross-Site Scripting Vulnerabilities (2.0)
CVE-2014-4537
CWE-79
High
WordPress Plugin Kimili Flash Embed Unspecified Vulnerability (2.2.1)
-
-
High
WordPress Plugin Kindeditor For WordPress Cross-Site Scripting (1.3.3)
-
CWE-79
High
WordPress Plugin Kino Gallery TimThumb Arbitrary File Upload (1.0)
CVE-2011-4106
CWE-20
High
WordPress Plugin Kish Guest Posting 'uploadify.php' Arbitrary File Upload (1.2)
CVE-2012-5318
CWE-434
High
WordPress Plugin KittyCatfish Ads by Missilesilo SQL Injection (2.2)
-
CWE-89
High
WordPress Plugin KJM Admin Notices Cross-Site Scripting (2.0.1)
CVE-2021-39344
CWE-79
High
WordPress Plugin kk Star Ratings 'root' Parameter Remote File Include (1.7)
-
CWE-94
High
WordPress Plugin kk Star Ratings Security Bypass (2.3.1)
-
CWE-264
High
WordPress Plugin Klarna Checkout for WooCommerce Security Bypass (2.0.9)
-
CWE-264
High
WordPress Plugin Klaviyo Cross-Site Scripting (3.0.7)
CVE-2023-25456
CWE-79
High
WordPress Plugin Klaviyo Cross-Site Scripting (3.0.9)
CVE-2023-0874
CWE-79
High
WordPress Plugin KN Fix Your Title Cross-Site Scripting (1.0.1)
-
CWE-79
High
WordPress Plugin Knews Multilingual Newsletters 'ff' Parameter Cross-Site Scripting (1.1.0)
-
CWE-79
High
WordPress Plugin Knews Multilingual Newsletters Cross-Site Request Forgery (1.2.5)
-
CWE-352
High
WordPress Plugin Knews Multilingual Newsletters SQL Injection (1.7.0)
-
CWE-89
High
WordPress Plugin Knight Lab Timeline Cross-Site Scripting (3.6.6)
CVE-2020-15092
CWE-79
High
WordPress Plugin KNR Author List Widget 'listItem[]' Parameter SQL Injection (2.0.0)
-
CWE-89
High
WordPress Plugin Konnichiwa! Membership Cross-Site Scripting (0.8.3)
CVE-2021-38317
CWE-79
High
WordPress Plugin Kraken.io Image Optimizer Cross-Site Request Forgery (2.6.5)
CVE-2022-38454
CWE-352
High
WordPress Plugin Laika Pedigree Tree Unspecified Vulnerability (0.13.4)
-
-
High
WordPress Plugin Lana Email Logger Cross-Site Scripting (1.0.2)
CVE-2023-3166
CWE-79
High
WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Cross-Site Scripting (1.4.9.5)
CVE-2021-25067
CWE-79
High
WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Cross-Site Scripting (1.4.9.8.9)
CVE-2022-4718
CWE-79
High
WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Local File Inclusion (1.4.3)
-
CWE-22
High
WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Unspecified Vulnerability (1.4.1)
-
-
High
WordPress Plugin Language Bar Flags Cross-Site Request Forgery (1.0.8)
CVE-2021-24431
CWE-352
High
WordPress Plugin Lara's Google Analytics Cross-Site Scripting (2.0.4)
-
CWE-79
High
WordPress Plugin Larsens Calender Cross-Site Scripting (1.2)
CVE-2020-23762
CWE-79
High
WordPress Plugin Last.fm Rotation Local File Inclusion (1.0)
CVE-2014-5181
CWE-22
High
WordPress Plugin lasTunes Cross-Site Scripting (3.6.1)
-
CWE-79
High
WordPress Plugin Latest Posts by BestWebSoft Cross-Site Scripting (0.2)
CVE-2017-2171
CWE-79
High
WordPress Plugin Launcher:Coming Soon & Maintenance Mode Cross-Site Scripting (1.0.10)
CVE-2019-7411
CWE-79
High