Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Local File Inclusion (1.5.24)
CVE-2019-14798
CWE-22
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Cross-Site Scripting Vulnerabilities (1.1.30)
CVE-2014-6315
CWE-79
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Cross-Site Scripting Vulnerabilities (1.5.45)
CVE-2020-9335
CWE-79
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Vulnerabilities (1.2.9)
CVE-2015-1394
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Vulnerabilities (1.5.34)
CVE-2019-16119
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.2.7)
CVE-2015-1055
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.3.29)
-
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.3.50)
CVE-2017-12977
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.5.30)
CVE-2019-14313
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.5.54)
CVE-2021-24139
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Unspecified Vulnerability (1.2.100)
-
-
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Unspecified Vulnerability (1.2.41)
-
-
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Unspecified Vulnerability (1.3.66)
-
-
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Unspecified Vulnerability (1.5.55)
-
-
High
WordPress Plugin Photo Gallery by Ays-Responsive Image Gallery SQL Injection (1.0.0)
-
CWE-89
High
WordPress Plugin Photo Gallery by Ays-Responsive Image Gallery SQL Injection (4.4.3)
CVE-2021-24462
CWE-89
High
WordPress Plugin Photo Gallery by Supsystic Multiple Vulnerabilities (1.8.5)
-
CWE-352
High
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Cross-Site Request Forgery (3.2.11)
CVE-2023-24414
CWE-352
High
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Cross-Site Request Forgery (3.2.9)
CVE-2022-45804
CWE-352
High
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Cross-Site Scripting (3.2.12)
CVE-2023-27620
CWE-79
High
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Multiple Unspecified Vulnerabilities (1.7.3)
-
-
High
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Remote Code Execution (2.0.14)
-
CWE-94
High
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Security Bypass (2.0.15)
-
CWE-264
High
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Unspecified Vulnerability (2.0.18)
-
-
High
WordPress Plugin Photo Gallery-Image Gallery by Ape Cross-Site Scripting (1.6.14)
CVE-2019-6117
CWE-79
High
WordPress Plugin Photo Gallery-Image Gallery by Ape Security Bypass (2.0.6)
-
CWE-264
High
WordPress Plugin Photocart Link Local File Inclusion (1.6)
-
CWE-22
High
WordPress Plugin Photoracer 'id' Parameter SQL Injection (1.0)
CVE-2009-2122
CWE-89
High
WordPress Plugin Photoracer Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (1.0)
-
CWE-89
High
WordPress Plugin PhotoSmash Galleries 'action' Parameter Cross-Site Scripting (1.0.2)
CVE-2011-5307
CWE-79
High
WordPress Plugin PhotoSmash Galleries Arbitrary File Upload (1.0.7)
-
CWE-434
High
WordPress Plugin Photospace Gallery Cross-Site Scripting (2.3.5)
CVE-2022-3991
CWE-79
High
WordPress Plugin Photospace Responsive Gallery Unspecified Vulnerability (1.1.7)
-
-
High
WordPress Plugin Photoswipe Masonry Gallery Cross-Site Scripting (1.2.14)
CVE-2022-0750
CWE-79
High
WordPress Plugin Photoswipe Masonry Gallery Unspecified Vulnerability (1.2.17)
-
-
High
WordPress Plugin PhotoXhibit Multiple Cross-Site Scripting Vulnerabilities (2.1.8)
CVE-2016-1000144
CWE-79
High
WordPress Plugin PHP Analytics Arbitrary File Upload (1.0.0.2)
-
CWE-434
High
WordPress Plugin PHP Event Calendar for WordPress Arbitrary File Upload (1.6)
-
CWE-434
High
WordPress Plugin PHP Everywhere Multiple Remote Code Execution Vulnerabilities (2.0.3)
CVE-2022-24665
CWE-94
High
WordPress Plugin PHP Everywhere Security Bypass (1.3)
-
CWE-264
High
WordPress Plugin PHP Speedy 'admin_container.php' Remote PHP Code Execution (0.5.2)
-
CWE-94
High
WordPress Plugin PHPFreeChat 'url' Parameter Cross-Site Scripting (0.2.8)
-
CWE-79
High
WordPress Plugin PI Button includes Backdoor [Only if downloaded via the vendor website] (3.3.3)
CVE-2021-24867
CWE-912
High
WordPress Plugin PICA Photo Gallery 'imgname' Parameter Information Disclosure (1.0)
-
CWE-22
High
WordPress Plugin PICA Photo Gallery 'picaPhotosResize.php' Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin PICA Photo Gallery SQL Injection (1.0)
-
CWE-89
High
WordPress Plugin PickPlugins Product Slider for WooCommerce Cross-Site Scripting (1.13.21)
CVE-2021-24300
CWE-79
High
WordPress Plugin PickPlugins Product Slider for WooCommerce Unspecified Vulnerability (1.13.23)
-
-
High
WordPress Plugin PictoBrowser Cross-Site Request Forgery (0.3.1)
CVE-2014-9392
CWE-352
High
WordPress Plugin PictPress 'resize.php' Multiple Local File Include Vulnerabilities (1.0)
CVE-2007-6369
CWE-22
High
WordPress Plugin Picture Gallery-Frontend Image Uploads, AJAX Photo List Cross-Site Scripting (1.4.2)
-
CWE-79
High
WordPress Plugin Picturesurf Gallery 'upload.php' Arbitrary File Upload (1.2)
-
CWE-434
High
WordPress Plugin Pierre's Wordspew 'wordspew.php' Multiple SQL Injection Vulnerabilities (5.61)
-
CWE-89
High
WordPress Plugin Pike Firewall Information Disclosure (1.4)
-
CWE-200
High
WordPress Plugin PIKLIST-Rapid development framework Cross-Site Scripting (0.9.4.25)
-
CWE-79
High
WordPress Plugin Pinblocks-Gutenberg blocks with Pinterest widgets Unspecified Vulnerability (1.0.1)
-
-
High
WordPress Plugin Pinpoint Booking System-#1 WordPress Booking SQL Injection (1.2)
CVE-2014-3210
CWE-89
High
WordPress Plugin Pinpoint Booking System-#1 WordPress Booking SQL Injection (2.0)
-
CWE-89
High
WordPress Plugin Pinpoint Booking System-#1 WordPress Booking SQL Injection (2.9.9.2.8)
CVE-2023-0220
CWE-89
High
WordPress Plugin Pinterest 'Pin It' Button Cross-Site Scripting (2.0.8)
-
CWE-79
High
WordPress Plugin Pinterest 'Pin It' Button Multiple Unspecified Vulnerabilities (1.3.1)
-
-
High
WordPress Plugin Pinterest Automatic Pin Security Bypass (4.14.3)
-
CWE-264
High
WordPress Plugin Pinterest Badge Cross-Site Scripting (1.9.0)
-
CWE-79
High
WordPress Plugin Pinterest by BestWebSoft Cross-Site Scripting (1.0.4)
CVE-2017-18517
CWE-79
High
WordPress Plugin Pinterest Feed Multiple Vulnerabilities (1.1.1)
CVE-2018-5656
CWE-352
High
WordPress Plugin pipdig Power pack (p3) Backdoor (4.7.3)
-
CWE-95
High
WordPress Plugin PitchPrint Arbitrary File Upload (7.1.1)
-
CWE-434
High
WordPress Plugin PitchPrint Arbitrary File Upload (7.2.1)
-
CWE-434
High
WordPress Plugin Pixabay Images Multiple Vulnerabilities (2.3)
CVE-2015-1376
CWE-592
High
WordPress Plugin PixCodes Cross-Site Scripting (2.3.6)
CVE-2022-4671
CWE-79
High
WordPress Plugin Pixel Manager for WooCommerce-Track Google Analytics, Google Ads, TikTok and more Supply Chain Attack [Polyfill.io] (1.43.3)
-
CWE-1372
High
WordPress Plugin PixelYourSite-Facebook Pixel (Events, WooCommerce & Easy Digital Downloads) Cross-Site Scripting (5.2.1)
CVE-2018-0578
CWE-79
High
WordPress Plugin PixelYourSite-Facebook Pixel (Events, WooCommerce & Easy Digital Downloads) Multiple Unspecified Vulnerabilities (4.0.2)
-
-
High
WordPress Plugin Placemarks Cross-Site Scripting (2.0.0)
-
CWE-79
High
WordPress Plugin Plainview Activity Monitor Remote Command Execution (20161228)
CVE-2018-15877
CWE-94
High