Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Print-O-Matic Cross-Site Scripting (2.0.2)
CVE-2021-24710
CWE-79
High
WordPress Plugin Print-O-Matic Cross-Site Scripting (2.1.7)
CVE-2022-4753
CWE-79
High
WordPress Plugin Prismatic Multiple Cross-Site Scripting Vulnerabilities (2.7)
CVE-2021-24409
CWE-79
High
WordPress Plugin Private Only Multiple Vulnerabilities (3.5.1)
CVE-2015-5483
CWE-352
High
WordPress Plugin Pro Quoter Multiple Cross-Site Scripting Vulnerabilities (1.0)
CVE-2014-4545
CWE-79
High
WordPress Plugin Process Steps Template Designer Cross-Site Request Forgery (1.2.1)
-
CWE-352
High
WordPress Plugin Processing Embed 'pluginurl' Parameter Cross-Site Scripting (0.5)
CVE-2010-4747
CWE-79
High
WordPress Plugin Product Addons & Fields for WooCommerce Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin Product Addons & Fields for WooCommerce Cross-Site Scripting (18.3)
CVE-2019-14948
CWE-79
High
WordPress Plugin Product Addons & Fields for WooCommerce Cross-Site Scripting (32.0.5)
CVE-2023-1839
CWE-79
High
WordPress Plugin Product Addons & Fields for WooCommerce Cross-Site Scripting (32.0.6)
CVE-2023-2256
CWE-79
High
WordPress Plugin Product Addons & Fields for WooCommerce Same Origin Method Execution (SOME) (14.0)
CVE-2016-4566
CWE-79
High
WordPress Plugin Product Addons & Fields for WooCommerce Security Bypass (23.9)
CVE-2021-25018
CWE-862
High
WordPress Plugin Product Addons & Fields for WooCommerce Unspecified Vulnerability (13.7)
-
-
High
WordPress Plugin Product Catalog 8 SQL Injection (1.2.0)
-
CWE-89
High
WordPress Plugin Product Catalog Arbitrary File Upload (3.1.1)
-
CWE-434
High
WordPress Plugin Product Catalog Arbitrary File Upload (3.8.6)
-
CWE-434
High
WordPress Plugin Product Catalog Cross-Site Scripting (4.2.8)
-
CWE-79
High
WordPress Plugin Product Catalog for WordPress Unspecified Vulnerability (1.4.5)
-
-
High
WordPress Plugin Product Catalog Multiple SQL Injection Vulnerabilities (2.1)
-
CWE-89
High
WordPress Plugin Product Catalog Multiple Vulnerabilities (3.1.2)
-
CWE-434
High
WordPress Plugin Product Catalog Multiple Vulnerabilities (4.2.11)
CVE-2017-12200
CWE-89
High
WordPress Plugin Product Catalog PHP Object Injection (4.2.25)
-
CWE-915
High
WordPress Plugin Product Catalog Privilege Escalation (3.8.1)
-
CWE-264
High
WordPress Plugin Product Catalog SQL Injection (3.1.2)
-
CWE-89
High
WordPress Plugin Product Catalog SQL Injection (3.9.8)
-
CWE-89
High
WordPress Plugin Product Catalog SQL Injection (4.2.2)
-
CWE-89
High
WordPress Plugin Product Catalog Unspecified Vulnerability (3.1.3)
-
-
High
WordPress Plugin Product Catalog X Cross-Site Request Forgery (1.5.12)
-
CWE-352
High
WordPress Plugin Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More SQL Injection (3.3.0.3)
CVE-2021-24511
CWE-89
High
WordPress Plugin Product Filter for WooCommerce Security Bypass (8.1.1)
-
CWE-264
High
WordPress Plugin Product Import Export for WooCommerce Cross-Site Request Forgery (1.7.4)
-
CWE-352
High
WordPress Plugin Product Input Fields for WooCommerce Arbitrary File Download (1.2.6)
-
CWE-538
High
WordPress Plugin Product Limited Time Availability Date for woocommerce Cross-Site Scripting (1.0.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Product list Widget for Woocommerce Cross-Site Scripting (1.0)
CVE-2022-4329
CWE-79
High
WordPress Plugin Product Lister for Walmart Remote Code Execution (1.0.1)
CVE-2017-9841
CWE-94
High
WordPress Plugin Product Loops for WooCommerce-100+ Awesome styles and options for your WooCommerce products Security Bypass (1.6.1)
-
CWE-264
High
WordPress Plugin Product Reviews Import Export for WooCommerce Cross-Site Request Forgery (1.3.2)
-
CWE-352
High
WordPress Plugin Product Reviews Import Export for WooCommerce CSV Injection (1.4.8)
CVE-2022-46802
CWE-1236
High
WordPress Plugin Product Size charts for Woocommerce Unspecified Vulnerability (1.0)
-
-
High
WordPress Plugin Product Slider and Carousel with Category for WooCommerce Cross-Site Scripting (2.7.1)
CVE-2022-4791
CWE-79
High
WordPress Plugin Product Slider for WooCommerce by PickPlugins Cross-Site Scripting (1.13.41)
CVE-2023-0166
CWE-79
High
WordPress Plugin Product Slider for WooCommerce Cross-Site Scripting (2.6.3)
CVE-2022-4629
CWE-79
High
WordPress Plugin Product Slider For WooCommerce Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.5)
CVE-2021-24867
CWE-912
High
WordPress Plugin Product Slider for WooCommerce Security Bypass (2.5.6)
CVE-2022-2382
CWE-862
High
WordPress Plugin Product Subtitle For WooCommerce Arbitrary File Disclosure (4.1)
-
CWE-538
High
WordPress Plugin Product Table by WBW Remote Code Execution (2.0.1)
CVE-2024-6365
CWE-94
High
WordPress Plugin Profile Builder Pro Security Bypass (3.1.0)
-
CWE-264
High
WordPress Plugin Profile Builder Pro SQL Injection (3.3.2)
-
CWE-89
High
WordPress Plugin Profile Extra Fields by BestWebSoft Cross-Site Scripting (1.0.7)
CVE-2017-2171
CWE-79
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Cross-Site Scripting (2.6.6)
-
CWE-79
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Cross-Site Scripting (4.7.4)
CVE-2022-0233
CWE-79
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Privilege Escalation (5.8.9)
CVE-2024-6411
CWE-269
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Remote Code Execution (2.8.5)
CVE-2019-15873
CWE-94
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Unspecified Vulnerability (2.6.4)
-
-
High
WordPress Plugin Profiles 'bio-img.php' SQL Injection (2.0RC1)
-
CWE-89
High
WordPress Plugin Project Status Cross-Site Scripting (1.6)
CVE-2021-24558
CWE-79
High
WordPress Plugin Project Supremacy V3 Lite Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Project2App-Turn Your WordPress Site into an Android App Cross-Site Scripting (2.0.2)
CVE-2021-24435
CWE-79
High
WordPress Plugin PromoBar by BestWebSoft Cross-Site Scripting (1.1.0)
CVE-2017-18529
CWE-79
High
WordPress Plugin Properties and Agents-Real Estate Manager Cross-Site Scripting (6.7.1)
-
CWE-79
High
WordPress Plugin PropertyHive Cross-Site Scripting (1.4.14)
CVE-2018-6465
CWE-79
High
WordPress Plugin PropertyHive Remote Code Execution (1.4.25)
-
CWE-94
High
WordPress Plugin ProPlayer 'pp_playlist_id' Parameter SQL Injection (4.7.7)
-
CWE-89
High
WordPress Plugin ProPlayer SQL Injection (4.7.9.1)
-
CWE-89
High
WordPress Plugin Protected Posts Logout Button Cross-Site Request Forgery (1.4.4)
-
CWE-352
High
WordPress Plugin Protected Posts Logout Button Security Bypass (1.4.5)
CVE-2023-25454
CWE-862
High
WordPress Plugin PS PHPCaptcha WP Denial of Service (1.1.0)
CVE-2019-7412
CWE-400
High
WordPress Plugin Publish to Schedule Cross-Site Request Forgery (4.4.2)
CVE-2023-25994
CWE-352
High
WordPress Plugin Publish to Schedule Cross-Site Scripting (4.5.4)
CVE-2023-26519
CWE-79
High
WordPress Plugin PublishPress Capabilities-User Role Access, Editor Permissions, Admin Menus Cross-Site Request Forgery (2.3.1)
-
CWE-352
High
WordPress Plugin PublishPress Capabilities-User Role Access, Editor Permissions, Admin Menus Security Bypass (2.3)
CVE-2021-25032
CWE-264
High
WordPress Plugin PublishPress Future: Automatically Unpublish WordPress Posts Cross-Site Scripting (2.7.0)
-
CWE-79
High
WordPress Plugin PublishPress Future: Automatically Unpublish WordPress Posts Multiple Vulnerabilities (2.1.1)
-
CWE-352
High
WordPress Plugin PublishPress Future: Automatically Unpublish WordPress Posts Security Bypass (2.5.1)
CVE-2021-24783
CWE-264
High