Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WP Spell Check Cross-Site Request Forgery (7.1.9)
CVE-2019-6027
CWE-352
High
WordPress Plugin WP Spell Check Cross-Site Scripting (9.2)
-
CWE-79
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Arbitrary File Upload (3.4.3)
CVE-2024-3412
CWE-434
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Cross-Site Scripting (2.9.17)
CVE-2022-2737
CWE-79
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Information Disclosure (3.4.3)
CVE-2024-3682
CWE-200
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Server-Side Request Forgery (3.4.3)
CVE-2024-4469
CWE-918
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Unspecified Vulnerability (2.4.3)
-
-
High
WordPress Plugin WP Statistics Cross-Site Scripting (12.0.5)
-
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (12.0.8.1)
-
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (12.0.9)
CVE-2017-10991
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (12.6.3)
CVE-2019-10864
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (12.6.5)
CVE-2019-12566
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (12.6.7)
-
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (13.0.9)
-
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (13.2.1)
CVE-2022-27231
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (8.3)
-
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (9.1.2)
-
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (9.5.1)
-
CWE-79
High
WordPress Plugin WP Statistics Multiple Cross-Site Scripting Vulnerabilities (12.0.1)
CVE-2017-2135
CWE-79
High
WordPress Plugin WP Statistics Multiple Cross-Site Scripting Vulnerabilities (12.0.4)
CVE-2017-2147
CWE-79
High
WordPress Plugin WP Statistics Multiple Cross-Site Scripting Vulnerabilities (2.2.4)
-
CWE-79
High
WordPress Plugin WP Statistics Multiple Unspecified Vulnerabilities (9.6.5)
-
-
High
WordPress Plugin WP Statistics Multiple Vulnerabilities (13.1.5)
CVE-2022-25307
CWE-89
High
WordPress Plugin WP Statistics SQL Injection (12.0.7)
-
CWE-89
High
WordPress Plugin WP Statistics SQL Injection (12.6.6.1)
CVE-2019-13275
CWE-89
High
WordPress Plugin WP Statistics SQL Injection (13.0.7)
CVE-2021-24340
CWE-89
High
WordPress Plugin WP Statistics SQL Injection (13.1.4)
CVE-2022-0513
CWE-89
High
WordPress Plugin WP Statistics SQL Injection (13.2.8)
CVE-2022-4230
CWE-89
High
WordPress Plugin WP Statistics SQL Injection (9.4)
-
CWE-89
High
WordPress Plugin WP Subscribe Cross-Site Scripting (1.0.2)
-
CWE-79
High
WordPress Plugin WP Subtitle Unspecified Vulnerability (2.5)
-
-
High
WordPress Plugin WP Sudoku Plus Unspecified Vulnerability (1.4)
-
-
High
WordPress Plugin WP Super Cache Cache Poisoning (1.8)
-
CWE-349
High
WordPress Plugin WP Super Cache Cross-Site Scripting (1.3)
-
CWE-79
High
WordPress Plugin WP Super Cache Cross-Site Scripting (1.4)
-
CWE-79
High
WordPress Plugin WP Super Cache Cross-Site Scripting (1.4.2)
-
CWE-79
High
WordPress Plugin WP Super Cache Cross-Site Scripting (1.7.2)
CVE-2021-24329
CWE-79
High
WordPress Plugin WP Super Cache Multiple Vulnerabilities (1.4.4)
-
CWE-915
High
WordPress Plugin WP Super Cache PHP Code Injection (1.2)
CVE-2013-2011
CWE-95
High
WordPress Plugin WP Super Cache Remote Code Execution (1.7.1)
CVE-2021-24209
CWE-94
High
WordPress Plugin wp superb Slideshow 'upload.php' Arbitrary File Upload (2.2)
-
CWE-434
High
WordPress Plugin wp superb Slideshow Arbitrary File Upload (2.4)
-
CWE-434
High
WordPress Plugin wp superb Slideshow Information Disclosure (2.4)
-
CWE-200
High
WordPress Plugin WP Support Plus Responsive Ticket System Cross-Site Scripting (9.1.1)
CVE-2019-7299
CWE-79
High
WordPress Plugin WP Support Plus Responsive Ticket System Multiple Vulnerabilities (4.1)
-
CWE-200
High
WordPress Plugin WP Support Plus Responsive Ticket System PHP Object Injection (9.0.3)
-
CWE-915
High
WordPress Plugin WP Support Plus Responsive Ticket System Privilege Escalation (7.1.4)
-
CWE-264
High
WordPress Plugin WP Support Plus Responsive Ticket System Security Bypass (7.1.4)
-
CWE-287
High
WordPress Plugin WP Support Plus Responsive Ticket System SQL Injection (7.1.4)
-
CWE-89
High
WordPress Plugin WP Support Plus Responsive Ticket System Unspecified Vulnerability (8.0.7)
-
-
High
WordPress Plugin WP Survey And Quiz Tool 'action' Parameter Cross-Site Scripting (1.2.1)
CVE-2010-4630
CWE-79
High
WordPress Plugin WP Survey And Quiz Tool 'rowcount' Parameter Cross-Site Scripting (2.9.2)
-
CWE-79
High
WordPress Plugin WP Survey Plus Security Bypass (1.0)
CVE-2021-24801
CWE-264
High
WordPress Plugin WP SVG Icons Cross-Site Request Forgery (3.2.1)
CVE-2019-14216
CWE-352
High
WordPress Plugin WP SVG Icons Multiple Unspecified Vulnerabilities (3.1.8.1)
-
-
High
WordPress Plugin WP SVG images Cross-Site Scripting (3.3)
CVE-2021-24386
CWE-79
High
WordPress Plugin WP Symposium 'get_profile_avatar.php' SQL Injection (0.64)
-
CWE-89
High
WordPress Plugin WP Symposium A Social Network For WordPress Multiple Cross-Site Scripting Vulnerabilities (12.07.07)
-
CWE-79
High
WordPress Plugin WP Symposium A Social Network For WordPress Multiple SQL Injection Vulnerabilities (12.06.16)
-
CWE-89
High
WordPress Plugin WP Symposium Arbitrary File Upload (14.11)
CVE-2014-10021
CWE-434
High
WordPress Plugin WP Symposium Arbitrary File Upload Vulnerabilities (11.11.26)
CVE-2011-5051
CWE-434
High
WordPress Plugin WP Symposium Cross-Site Scripting (11.11.26)
CVE-2011-3841
CWE-79
High
WordPress Plugin WP Symposium Cross-Site Scripting (13.02)
CVE-2013-2695
CWE-79
High
WordPress Plugin WP Symposium Cross-Site Scripting (15.8.1)
CVE-2015-9414
CWE-79
High
WordPress Plugin WP Symposium Multiple SQL Injection Vulnerabilities (12.09)
-
CWE-89
High
WordPress Plugin WP Symposium Multiple Vulnerabilities (14.05.02)
-
CWE-352
High
WordPress Plugin WP Symposium Multiple Vulnerabilities (14.10)
CVE-2014-8810
CWE-89
High
WordPress Plugin WP Symposium Open Redirect (13.04)
CVE-2013-2694
CWE-601
High
WordPress Plugin WP Symposium Open Redirect (13.12)
-
CWE-601
High
WordPress Plugin WP Symposium Pro Social Network Cross-Site Scripting (16.01)
-
CWE-79
High
WordPress Plugin WP Symposium Pro Social Network Multiple Vulnerabilities (15.12)
-
CWE-352
High
WordPress Plugin WP Symposium SQL Injection (15.1)
CVE-2015-3325
CWE-89
High
WordPress Plugin WP Symposium SQL Injection (15.5.1)
-
CWE-89
High
WordPress Plugin WP Symposium Toolbar Unspecified Vulnerability (0.26.0)
-
-
High
WordPress Plugin WP Table Builder-WordPress Table Cross-Site Scripting (1.3.9)
-
CWE-79
High