Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin ShopLentor-WooCommerce Builder for Elementor & Gutenberg +10 Modules-All in One Solution (formerly WooLentor) Multiple Vulnerabilities (2.5.3)
CVE-2023-0232
CWE-915
High
WordPress Plugin Shopp Arbitrary File Upload (1.4)
CVE-2021-24493
CWE-434
High
WordPress Plugin Shopp Multiple Vulnerabilities (1.0.17)
-
CWE-434
High
WordPress Plugin Shoppable Images Multiple Vulnerabilities (1.0.0)
-
CWE-915
High
WordPress Plugin Shoppable Images Multiple Vulnerabilities (1.2.3)
CVE-2023-25698
CWE-862
High
WordPress Plugin Shopping Cart & eCommerce Store Arbitrary File Upload (3.0.8)
CVE-2014-9308
CWE-434
High
WordPress Plugin Shopping Cart & eCommerce Store Cross-Site Request Forgery (5.1.0)
CVE-2021-34645
CWE-352
High
WordPress Plugin Shopping Cart & eCommerce Store Information Disclosure (2.0.5)
CVE-2014-4942
CWE-200
High
WordPress Plugin Shopping Cart & eCommerce Store Multiple Security Bypass Vulnerabilities (3.0.20)
CVE-2015-2673
CWE-264
High
WordPress Plugin Shopping Cart & eCommerce Store Unspecified Vulnerability (3.1.9)
-
-
High
WordPress Plugin Shopping Cart Multiple SQL Injection and Arbitrary File Upload Vulnerabilities (8.1.14)
-
CWE-434
High
WordPress Plugin Shortcode Addons-with Visual Composer, Divi, Beaver Builder and Elementor Extension Arbitrary File Upload (3.2.5)
CVE-2024-31114
CWE-434
High
WordPress Plugin Shortcode Addons-with Visual Composer, Divi, Beaver Builder and Elementor Extension Function Injection (3.2.5)
-
CWE-306
High
WordPress Plugin Shortcode Factory Local File Inclusion (2.7)
CVE-2019-15322
CWE-22
High
WordPress Plugin Shortcode for Font Awesome Cross-Site Scripting (1.4)
CVE-2023-0419
CWE-79
High
WordPress Plugin Shortcode Ninja Cross-Site Scripting (1.4)
CVE-2014-4550
CWE-79
High
WordPress Plugin Shortcode Redirect 'domain' Parameter Cross-Site Scripting (1.0.01)
CVE-2012-5325
CWE-79
High
WordPress Plugin Shortcoder-Create Shortcodes for Anything Security Bypass (6.3)
CVE-2023-49849
CWE-862
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking 'pretty-bar.php' Cross-Site Scripting (1.5.2)
-
CWE-79
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking 'slug' Parameter Cross-Site Scripting (1.5.5)
CVE-2011-5192
CWE-79
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Cross-Site Scripting (1.6.0)
-
CWE-79
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Cross-Site Scripting (1.6.2)
CVE-2013-1636
CWE-79
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Cross-Site Scripting (1.6.8)
-
CWE-79
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (1.5.2)
-
CWE-89
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Multiple Cross-Site Scripting Vulnerabilities (1.4.56)
-
CWE-79
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Multiple Cross-Site Scripting Vulnerabilities (2.1.2)
-
CWE-79
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Multiple SQL Injection Vulnerabilities (1.4.56)
-
CWE-89
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Multiple Unspecified Vulnerabilities (1.6.3)
-
-
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Multiple Vulnerabilities (2.1.9)
-
CWE-79
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking SQL Injection (1.6.7)
-
CWE-89
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Unspecified Vulnerability (2.1.8)
-
-
High
WordPress Plugin ShortPixel Adaptive Images-WebP, AVIF, CDN, Image Optimization Cross-Site Scripting (3.6.2)
CVE-2023-0334
CWE-79
High
WordPress Plugin Show-Hide/Collapse-Expand Cross-Site Scripting (1.2.5)
CVE-2022-4829
CWE-79
High
WordPress Plugin Showbiz Pro Responsive Teaser Arbitrary File Upload (1.7.1)
-
CWE-434
High
WordPress Plugin SI CAPTCHA Anti-Spam Cross-Site Scripting (2.7.5)
CVE-2014-5190
CWE-79
High
WordPress Plugin SI CAPTCHA Anti-Spam Serving Spam (3.0.2)
-
CWE-20
High
WordPress Plugin Side Cart Woocommerce (Ajax) Cross-Site Request Forgery (2.0)
CVE-2022-0215
CWE-352
High
WordPress Plugin Side Menu Lite-add sticky fixed buttons SQL Injection (2.2)
CVE-2021-24521
CWE-89
High
WordPress Plugin Side Menu Lite-add sticky fixed buttons SQL Injection (2.2.1)
-
CWE-89
High
WordPress Plugin Side Menu Lite-add sticky fixed buttons SQL Injection (2.2.5)
CVE-2021-24580
CWE-89
High
WordPress Plugin Side Menu-add fixed side buttons SQL Injection (3.1.3)
CVE-2021-24348
CWE-89
High
WordPress Plugin Sidebar Adder 2 Cross-Site Scripting (2.0.0)
CVE-2021-34666
CWE-79
High
WordPress Plugin Sidebar Login Cross-Site Scripting (2.3.6)
-
CWE-79
High
WordPress Plugin Sidekick Multiple Unspecified Vulnerabilities (2.2.1)
-
-
High
WordPress Plugin Sign-up Sheets Cross-Site Scripting (1.0.13)
CVE-2021-24440
CWE-79
High
WordPress Plugin Simba Plugin Updates Manager Multiple Cross-Site Request Forgery Vulnerabilities (1.6.16)
-
CWE-352
High
WordPress Plugin Similar Posts-Best Related Posts for WordPress Remote Code Execution (3.1.5)
CVE-2021-24537
CWE-94
High
WordPress Plugin Simpel Reserveren 3 Cross-Site Scripting (3.5.2)
CVE-2016-1000149
CWE-79
High
WordPress Plugin Simple 301 Redirects by BetterLinks Multiple Security Bypass Vulnerabilities (2.0.3)
CVE-2021-24356
CWE-264
High
WordPress Plugin Simple 301 Redirects by BetterLinks Unspecified Vulnerability (1.06)
-
-
High
WordPress Plugin Simple 301 Redirects-Addon-Bulk Uploader Multiple Security Bypass Vulnerabilities (1.2.4)
CVE-2019-15818
CWE-264
High
WordPress Plugin Simple add pages or posts Cross-Site Request Forgery (1.6)
-
CWE-352
High
WordPress Plugin Simple Admin Language Change Security Bypass (2.0.1)
-
CWE-264
High
WordPress Plugin Simple Ads Manager Arbitrary File Upload (2.5.94)
CVE-2015-2825
CWE-434
High
WordPress Plugin Simple Ads Manager Denial of Service (2.9.3.114)
-
CWE-400
High
WordPress Plugin Simple Ads Manager Local File Inclusion (2.10.0.130)
-
CWE-22
High
WordPress Plugin Simple Ads Manager Multiple Vulnerabilities (2.6.96)
CVE-2015-2826
CWE-200
High
WordPress Plugin Simple Ads Manager PHP Object Injection (2.9.8.125)
-
CWE-915
High
WordPress Plugin Simple Ads Manager SQL Injection (2.9.4.116)
-
CWE-89
High
WordPress Plugin Simple Ajax Shoutbox SQL Injection (2.2.1)
-
CWE-89
High
WordPress Plugin Simple Backup Arbitrary File Download (2.7.10)
-
CWE-538
High
WordPress Plugin Simple Backup Multiple Vulnerabilities (2.7.11)
-
CWE-73
High
WordPress Plugin Simple Banner Cross-Site Scripting (2.10.3)
CVE-2021-24574
CWE-79
High
WordPress Plugin Simple Banner Cross-Site Scripting (2.11.0)
CVE-2022-2515
CWE-79
High
WordPress Plugin Simple Behance Portfolio Cross-Site Scripting (0.2)
CVE-2021-34649
CWE-79
High
WordPress Plugin Simple Business Directory with Maps PHP Object Injection (3.6.0)
-
CWE-915
High
WordPress Plugin Simple Contact Info Arbitrary File Deletion (1.1.9)
-
CWE-73
High
WordPress Plugin Simple Custom CSS and JS Cross-Site Scripting (3.3)
CVE-2017-2285
CWE-79
High
WordPress Plugin Simple Download Button Shortcode 'file' Parameter Information Disclosure (1.0)
-
CWE-22
High
WordPress Plugin Simple Download Monitor Cross-Site Scripting (3.5.3)
CVE-2018-5213
CWE-79
High
WordPress Plugin Simple Download Monitor Cross-Site Scripting (3.9.10)
CVE-2021-24694
CWE-79
High
WordPress Plugin Simple Download Monitor Multiple Cross-Site Request Forgery Vulnerabilities (3.9.8)
CVE-2021-24696
CWE-352
High
WordPress Plugin Simple Download Monitor Multiple Cross-Site Scripting Vulnerabilities (3.9.4)
CVE-2021-24697
CWE-79
High
WordPress Plugin Simple Download Monitor Multiple Vulnerabilities (3.2.8)
-
CWE-264
High
WordPress Plugin Simple Download Monitor Multiple Vulnerabilities (3.8.8)
CVE-2020-5651
CWE-89
High