Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Thinkun Remind 'dirPath' Parameter Information Disclosure (1.1.3)
-
CWE-22
High
WordPress Plugin ThirstyAffiliates Affiliate Link Manager Cross-Site Scripting (3.9.2)
CVE-2021-24127
CWE-79
High
WordPress Plugin ThreeWP Email Reflector 'Subject' Field Cross-Site Scripting (1.15)
CVE-2012-2572
CWE-79
High
WordPress Plugin Thrive Apprentice Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Architect Security Bypass (2.6.7.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Clever Widgets Security Bypass (1.56)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Comments Security Bypass (1.4.15.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Dashboard Security Bypass (2.3.9.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Headline Optimizer Security Bypass (1.3.7.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Leads Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Optimize Security Bypass (1.4.13.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Ovation Security Bypass (2.4.4)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Quiz Builder Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Themes Builder Security Bypass (2.2.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Ultimatum Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thumbnail carousel slider Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin TI WooCommerce Wishlist Security Bypass (1.21.11)
-
CWE-264
High
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Request Forgery (3.4.9.9)
CVE-2022-4549
CWE-352
High
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Request Forgery (3.5.1.0)
CVE-2023-23726
CWE-352
High
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Scripting (3.4.8.2)
CVE-2021-24797
CWE-79
High
WordPress Plugin Tickera-WordPress Event Ticketing Security Bypass (3.4.9.1)
-
CWE-862
High
WordPress Plugin Tickera-WordPress Event Ticketing Unspecified Vulnerability (3.4.6.7)
-
-
High
WordPress Plugin Ticket Manager Cross-Site Scripting (1)
-
CWE-79
High
WordPress Plugin Ticketrilla:Client PHP Object Injection (1.0.1)
-
CWE-915
High
WordPress Plugin Tidio Gallery Multiple Vulnerabilities (1.1)
CVE-2016-1000153
CWE-434
High
WordPress Plugin Tidio Live Chat Cross-Site Request Forgery (4.1.0)
-
CWE-352
High
WordPress Plugin Tierra's Billboard Manager SQL Injection (1.14)
-
CWE-89
High
WordPress Plugin Tigris for Salesforce PHP Object Injection (1.1.3)
-
CWE-915
High
WordPress Plugin Timber Cross-Site Scripting (1.2.2)
-
CWE-79
High
WordPress Plugin Time Sheets Cross-Site Scripting (1.4.2)
-
CWE-79
High
WordPress Plugin Time Sheets Multiple Cross-Site Scripting Vulnerabilities (1.5.1)
-
CWE-79
High
WordPress Plugin Timed Content Cross-Site Scripting (2.72)
CVE-2023-0067
CWE-79
High
WordPress Plugin Timed Popup Cross-Site Request Forgery (1.3)
CVE-2014-9525
CWE-352
High
WordPress Plugin Timeline Calendar SQL Injection (1.2)
CVE-2021-24553
CWE-89
High
WordPress Plugin Timeline Event History PHP Object Injection (3.1)
CVE-2024-5726
CWE-915
High
WordPress Plugin Timesheet by BestWebSoft Cross-Site Scripting (0.1.4)
CVE-2017-2171
CWE-79
High
WordPress Plugin Timetable and Event Schedule by MotoPress Cross-Site Request Forgery (2.4.1)
CVE-2021-24584
CWE-352
High
WordPress Plugin Timetable and Event Schedule by MotoPress Cross-Site Scripting (2.3.18)
CVE-2021-24724
CWE-79
High
WordPress Plugin Timetable and Event Schedule by MotoPress Information Disclosure (2.3.19)
CVE-2021-24585
CWE-200
High
WordPress Plugin Timetable and Event Schedule by MotoPress Unspecified Vulnerability (2.4.3)
-
-
High
WordPress Plugin Tiny URL Cross-Site Scripting (1.3.2)
CVE-2013-1808
CWE-79
High
WordPress Plugin TinyMCE Advanced Cross-Site Request Forgery (4.1)
-
CWE-352
High
WordPress Plugin TinyMCE Color Picker Multiple Vulnerabilities (1.1)
CVE-2014-3845
CWE-352
High
WordPress Plugin TinyMCE Custom Styles Cross-Site Scripting (1.1.2)
CVE-2023-23995
CWE-79
High
WordPress Plugin Tinymce Thumbnail Gallery 'href' Parameter Information Disclosure (1.0.7)
-
CWE-22
High
WordPress Plugin Titan Anti-spam & Security Cross-Site Scripting (4.1)
-
CWE-79
High
WordPress Plugin Titan Anti-spam & Security Security Bypass (7.3.0)
CVE-2022-2877
CWE-264
High
WordPress Plugin Titan Framework Cross-Site Scripting (1.12.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Titan Framework Cross-Site Scripting (1.5.2)
CVE-2014-6444
CWE-79
High
WordPress Plugin Titan Framework Cross-Site Scripting (1.7.5)
-
CWE-79
High
WordPress Plugin to Manage/Design WordPress Blog-WP Blog Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin To Top Security Bypass (2.2.2)
CVE-2021-24752
CWE-284
High
WordPress Plugin Toggle The Title Cross-Site Scripting (1.4)
CVE-2019-14795
CWE-79
High
WordPress Plugin Token Manager 'tid' Parameter Multiple Cross-Site Scripting Vulnerabilities (1.0.2)
-
CWE-79
High
WordPress Plugin Tom M8te Directory Traversal (1.5.3)
CVE-2014-5187
CWE-22
High
WordPress Plugin ToolBar to Share Cross-Site Request Forgery (2.0)
CVE-2022-1918
CWE-352
High
WordPress Plugin ToolPage Cross-Site Scripting (1.6.1)
CVE-2014-4560
CWE-79
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Cross-Site Scripting (1.8.7.2)
-
CWE-79
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.2.1.1)
CVE-2013-2768
CWE-352
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Multiple Unspecified Vulnerabilities (2.2.2)
-
-
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies PHP Object Injection (1.5.7)
-
CWE-915
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Privilege Escalation (2.3.3)
-
CWE-264
High
WordPress Plugin Tooltipy (tooltips for WP) Multiple Vulnerabilities (5.0.2)
-
CWE-352
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Request Forgery (1.9.2)
-
CWE-352
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Request Forgery (2.9.4)
-
CWE-352
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Scripting (2.3.0)
-
CWE-79
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Scripting (3.2.2)
CVE-2022-4570
CWE-79
High
WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.3)
CVE-2023-25993
CWE-862
High
WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.4)
CVE-2023-26008
CWE-284
High
WordPress Plugin Top 10-Popular posts for WordPress SQL Injection (2.4.3)
-
CWE-89
High
WordPress Plugin Top Quark Architecture 'script.php' Arbitrary File Upload (2.1.0)
-
CWE-434
High
WordPress Plugin Total Donations for Wordpress Security Bypass (2.0.5)
CVE-2019-6703
CWE-264
High
WordPress Plugin Total GDPR Compliance Lite-WordPress for GDPR Compatibility includes Backdoor [Only if downloaded via the vendor website] (1.0.4)
CVE-2021-24867
CWE-912
High
WordPress Plugin Total Sales For Woocommerce Cross-Site Scripting (1.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Total Security Multiple Unspecified Vulnerabilities (3.4.1)
-
-
High