Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Security Bypass (4.3.0)
-
CWE-862
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Server-Side Request Forgery (4.2.5)
CVE-2023-6294
CWE-918
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups SQL Injection (2.6.7.6)
CVE-2020-9006
CWE-89
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups SQL Injection (3.44)
CVE-2019-14695
CWE-89
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Unspecified Vulnerability (2.5.3)
-
-
High
WordPress Plugin Popup by Supsystic Cross-Site Request Forgery (1.7.8)
-
CWE-352
High
WordPress Plugin Popup by Supsystic Cross-Site Scripting (1.10.4)
CVE-2021-24275
CWE-79
High
WordPress Plugin Popup Like box-Page SQL Injection (3.5.2)
CVE-2021-24460
CWE-89
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Cross-Site Request Forgery (1.18.0)
-
CWE-352
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Cross-Site Scripting (1.16.10)
CVE-2022-3690
CWE-79
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Cross-Site Scripting (1.16.4)
CVE-2022-1104
CWE-79
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Cross-Site Scripting (1.6.4)
CVE-2017-2284
CWE-79
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Information Disclosure (1.8.11)
CVE-2019-17574
CWE-200
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Multiple Cross-Site Scripting Vulnerabilities (1.16.8)
CVE-2022-4381
CWE-79
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Multiple Vulnerabilities (1.17.1)
CVE-2022-47597
CWE-862
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Security Bypass (1.7.29)
-
CWE-264
High
WordPress Plugin Popup Modal For Youtube Cross-Site Scripting (1.0.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, Aweber-MailOptin Cross-Site Request Forgery (1.2.19.1)
-
CWE-352
High
WordPress Plugin Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, Aweber-MailOptin Security Bypass (1.2.35.1)
-
CWE-862
High
WordPress Plugin Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, Aweber-MailOptin Security Bypass (1.2.49.0)
CVE-2022-36340
CWE-862
High
WordPress Plugin Popup-Popup More Popups Directory Traversal (2.2.4)
CVE-2024-0844
CWE-22
High
WordPress Plugin Popups, Welcome Bar, Optins and Lead Generation-Icegram Cross-Site Request Forgery (1.9.18)
-
CWE-352
High
WordPress Plugin Popups, Welcome Bar, Optins and Lead Generation-Icegram Cross-Site Scripting (1.10.28.2)
CVE-2019-15830
CWE-79
High
WordPress Plugin Popups, Welcome Bar, Optins and Lead Generation-Icegram Cross-Site Scripting (2.0.2)
CVE-2021-36832
CWE-79
High
WordPress Plugin Popups, Welcome Bar, Optins and Lead Generation-Icegram Cross-Site Scripting (2.0.4)
CVE-2021-24941
CWE-79
High
WordPress Plugin Portable phpMyAdmin Authentication Bypass (1.3.0)
CVE-2012-5469
CWE-264
High
WordPress Plugin Portfolio by BestWebSoft Cross-Site Scripting (2.39)
CVE-2017-2171
CWE-79
High
WordPress Plugin Portfolio by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (2.27)
-
CWE-79
High
WordPress Plugin Portfolio Cross-Site Request Forgery (1.0)
CVE-2015-6523
CWE-352
High
WordPress Plugin Portfolio for Elementor, Image Gallery & Post Grid-PowerFolio Cross-Site Scripting (2.3)
CVE-2022-4765
CWE-79
High
WordPress Plugin Portfolio for Elementor, Image Gallery & Post Grid-PowerFolio Security Bypass (2.1.6)
-
CWE-862
High
WordPress Plugin Portfolio for Elementor, Image Gallery & Post Grid-PowerFolio Unspecified Vulnerability (2.3.1)
-
-
High
WordPress Plugin Portfolio Gallery-Image Gallery Cross-Site Request Forgery (1.1.2)
-
CWE-352
High
WordPress Plugin Portfolio Gallery-Photo Gallery Cross-Site Scripting (1.5.7)
-
CWE-79
High
WordPress Plugin Portfolio Gallery-Photo Gallery Cross-Site Scripting (2.1.10)
-
CWE-79
High
WordPress Plugin Portfolio Gallery-Photo Gallery Cross-Site Scripting (2.2.2)
-
CWE-79
High
WordPress Plugin Portfolio Gallery-Photo Gallery Multiple Unspecified Vulnerabilities (2.0.72)
-
-
High
WordPress Plugin Portfolio Gallery-Photo Gallery Unspecified Vulnerability (2.3.0)
-
-
High
WordPress Plugin Portfolio Responsive Gallery SQL Injection (1.1.7)
CVE-2021-24457
CWE-89
High
WordPress Plugin Portfolio Slideshow Cross-Site Scripting (1.13.0)
CVE-2023-23717
CWE-79
High
WordPress Plugin Portfolio-WordPress Portfolio Cross-Site Request Forgery (2.8.8)
-
CWE-352
High
WordPress Plugin Portfolio-WordPress Portfolio Cross-Site Scripting (2.8.10)
CVE-2023-23685
CWE-79
High
WordPress Plugin Portrait-Archiv.com Photostore Cross-Site Scripting (3.1)
-
CWE-79
High
WordPress Plugin Post Connector Cross-Site Scripting (1.0.3)
CVE-2015-9362
CWE-79
High
WordPress Plugin Post Content XMLRPC SQL Injection (1.0)
CVE-2021-24629
CWE-89
High
WordPress Plugin Post Custom Templates Lite Cross-Site Scripting (1.6)
-
CWE-79
High
WordPress Plugin Post Duplicator Cross-Site Scripting (2.16)
-
CWE-79
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Cross-Site Scripting (2.6.9)
-
CWE-79
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Cross-Site Scripting (2.7.2)
CVE-2022-38971
CWE-79
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions PHAR Deserialization (2.7.7)
CVE-2023-26326
CWE-502
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Security Bypass (2.3.2)
-
CWE-264
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Security Bypass (2.6.2)
-
CWE-862
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions SQL Injection (2.2.7)
CVE-2018-21003
CWE-89
High
WordPress Plugin Post Grid Arbitrary File Deletion (2.0.12)
-
CWE-73
High
WordPress Plugin Post Grid Gutenberg Blocks and WordPress Blog-PostX Multiple Vulnerabilities (2.4.9)
CVE-2021-24661
CWE-264
High
WordPress Plugin Post Grid Gutenberg Blocks and WordPress Blog-PostX Security Bypass (4.1.2)
CVE-2024-5326
CWE-862
High
WordPress Plugin Post Grid Multiple Vulnerabilities (2.0.71)
CVE-2020-35938
CWE-915
High
WordPress Plugin Post Grid PHP Object Injection (2.0.11)
-
CWE-915
High
WordPress Plugin Post Grid, List for WordPress-Content Views Cross-Site Scripting (1.6.1)
-
CWE-79
High
WordPress Plugin Post Grid, List for WordPress-Content Views Cross-Site Scripting (1.9.0)
-
CWE-79
High
WordPress Plugin Post Grid, Post Carousel, & List Category Posts-by Smart Post Show Cross-Site Request Forgery (2.3.4)
-
CWE-352
High
WordPress Plugin post highlights 'ph_settings.php' SQL Injection (2.2)
-
CWE-89
High
WordPress Plugin post highlights Cross-Site Scripting (2.6)
CVE-2014-8087
CWE-79
High
WordPress Plugin Post Index Cross-Site Request Forgery (0.7.5)
CVE-2021-34637
CWE-352
High
WordPress Plugin Post Indexer (WPMU DEV) Multiple Vulnerabilities (3.0.6.1)
-
CWE-94
High
WordPress Plugin Post Lists View Custom Cross-Site Scripting (1.7.1)
-
CWE-79
High
WordPress Plugin Post Logo Cross-Site Scripting (1.1b)
-
CWE-79
High
WordPress Plugin Post Pay Counter PHP Object Injection (2.730)
-
CWE-915
High
WordPress Plugin Post PDF Export Local File Inclusion (1.0.1)
CVE-2014-2383
CWE-22
High
WordPress Plugin Post Recommendations for WordPress 'api.php' Remote File Include (1.1.2)
-
CWE-94
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Request Forgery (2.0.2)
-
CWE-352
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Request Forgery (2.0.20)
-
CWE-352
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (1.7.2)
-
CWE-79
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.1.3)
-
CWE-79
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.5.7)
CVE-2023-3082
CWE-79
High