Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13326 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Directory Traversal (3.1.4)
-
CWE-22
High
WordPress Plugin Billplz for WooCommerce Unspecified Vulnerability (3.10)
-
-
High
WordPress Plugin BuddyPress Arbitrary File Deletion (2.7.3)
-
CWE-73
High
WordPress Plugin Chained Quiz Cross-Site Scripting (0.9.9)
-
CWE-79
High
WordPress Plugin Chained Quiz Multiple Cross-Site Scripting Vulnerabilities (0.9.8)
-
CWE-79
High
WordPress Plugin ChikunCount Arbitrary File Upload (1.3)
-
CWE-434
High
WordPress Plugin CMS Commander Client PHP Object Injection (2.21)
-
CWE-915
High
WordPress Plugin CWIS-Antivirus Security Scanner Unspecified Vulnerability (2.3.2)
-
-
High
WordPress Plugin Developer Tools Arbitrary File Upload (1.1.4)
-
CWE-434
High
WordPress Plugin Direct Download for Woocommerce Arbitrary File Download (1.15)
-
CWE-538
High
WordPress Plugin DOP Slider Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Event Notifier Cross-Site Scripting (1.2.0)
-
CWE-79
High
WordPress Plugin Facebook Like Box Unspecified Vulnerability (1.0.17)
-
-
High
WordPress Plugin Fast Secure Contact Form Remote Code Execution (4.0.44)
CVE-2016-10045
CWE-94
High
WordPress Plugin FormBuilder Multiple Vulnerabilities (1.05)
-
CWE-352
High
WordPress Plugin FPW Category Thumbnails Multiple Unspecified Vulnerabilities (1.6.7)
-
-
High
WordPress Plugin Google Forms PHP Object Injection (0.87)
-
CWE-915
High
WordPress Plugin Google Map Remote Code Execution (1.0)
-
CWE-94
High
WordPress Plugin GorillaForms-Custom Contact Forms Unspecified Vulnerability (2.0.3)
-
-
High
WordPress Plugin Hupso Share Buttons for Twitter, Facebook & Google+ Multiple Unspecified Vulnerabilities (4.0.3)
-
-
High
WordPress Plugin Image Slider Arbitrary File Deletion (1.1.89)
-
CWE-73
High
WordPress Plugin InfiniteWP Client PHP Object Injection (1.6.0)
-
CWE-915
High
WordPress Plugin LazyEater Unspecified Vulnerability (1.2.1)
-
-
High
WordPress Plugin Markdown on Save Improved Cross-Site Scripting (2.5)
CVE-2016-4812
CWE-79
High
WordPress Plugin Menu Image Malware/Addware Notification (2.6.9)
-
CWE-506
High
WordPress Plugin Mobile Apps by Wiziapp (Native iPhone & Android mobile Apps) Multiple Unspecified Vulnerabilities (4.1.2)
-
-
High
WordPress Plugin moreAds SE Cross-Site Scripting (1.4.6)
-
CWE-79
High
WordPress Plugin Online Hotel Booking System Pro SQL Injection (1.0)
-
CWE-89
High
WordPress Plugin PHP Analytics Arbitrary File Upload (1.0.0.2)
-
CWE-434
High
WordPress Plugin Pike Firewall Information Disclosure (1.4)
-
CWE-200
High
WordPress Plugin Post Grid PHP Object Injection (2.0.11)
-
CWE-915
High
WordPress Plugin Responsive Poll Multiple Vulnerabilities (1.7.4)
-
CWE-352
High
WordPress Plugin Search 10 times faster with Elasticsearch or Apache Solr with lots of data-WPSOLR Unspecified Vulnerability (15.1)
-
-
High
WordPress Plugin Seo Spy Arbitrary File Upload (2.6)
-
CWE-434
High
WordPress Plugin Share Possible Remote Code Execution (1.0)
-
CWE-94
High
WordPress Plugin Simply Poll SQL Injection (1.4.1)
-
CWE-89
High
WordPress Plugin Social Networking & E-commerce Arbitrary File Upload (0.0.32)
-
CWE-434
High
WordPress Plugin Stop User Enumeration Cross-Site Scripting (1.3.7)
CVE-2017-18536
CWE-79
High
WordPress Plugin Stop User Enumeration User Enumeration (1.3.4)
-
CWE-203
High
WordPress Plugin teachPress Unspecified Vulnerability (5.0.17)
-
-
High
WordPress Plugin Templatic Tevolution Arbitrary File Upload (2.3.6)
-
CWE-434
High
WordPress Plugin User Access Manager Cross-Site Scripting (1.2.6.7)
-
CWE-79
High
WordPress Plugin W3 Total Cache Multiple Unspecified Vulnerabilities (0.9.5.1)
-
-
High
WordPress Plugin WangGuard Multiple Vulnerabilities (1.7.2)
-
CWE-352
High
WordPress Plugin WooCommerce Cross-Site Scripting (2.6.8)
CVE-2016-10112
CWE-79
High
WordPress Plugin Wp custom slider SQL Injection (1.6.2)
-
CWE-89
High
WordPress Plugin WP Discourse Unspecified Vulnerability (0.9.7)
-
-
High
WordPress Plugin WP Email Users SQL Injection (1.4.3)
-
CWE-89
High
WordPress Plugin WP Support Plus Responsive Ticket System Privilege Escalation (7.1.4)
-
CWE-264
High
WordPress Plugin Zendesk Chat Cross-Site Request Forgery (1.4.5)
-
CWE-352
High
WordPress Plugin AnyVar Cross-Site Scripting (0.1.1)
CVE-2017-6103
CWE-79
High
WordPress Plugin Automated Content for Real Estate Multiple Unspecified Vulnerabilities (5.4.2)
-
-
High
WordPress Plugin AW WordPress Yearly Category Archives Unspecified Vulnerability (1.2.1)
-
-
High
WordPress Plugin CM Answers Cross-Site Scripting (2.6.1)
-
CWE-79
High
WordPress Plugin CM Footnotes Cross-Site Scripting (1.1.4)
-
CWE-79
High
WordPress Plugin CM Table Of Contents Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin Coming Soon Possible Remote Code Execution (1.1.3)
CVE-2016-10045
CWE-94
High
WordPress Plugin Contact Form DB Cross-Site Scripting (2.10.29)
-
CWE-79
High
WordPress Plugin Contact Form Email Cross-Site Scripting (1.1.49)
-
CWE-79
High
WordPress Plugin Contact Form Submissions Unspecified Vulnerability (1.2)
-
-
High
WordPress Plugin Corner Ad Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin Democracy Poll Multiple Vulnerabilities (5.3.6)
-
CWE-352
High
WordPress Plugin Dialog Contact Form Cross-Site Scripting (1.2.0)
-
CWE-79
High
WordPress Plugin Easy Table Cross-Site Scripting (1.6)
-
CWE-79
High
WordPress Plugin Email posts to subscribers Multiple Vulnerabilities (2.0)
-
CWE-89
High
WordPress Plugin Esponce QR Code Generator Cross-Site Scripting (1.4)
-
CWE-79
High
WordPress Plugin Fancy Slideshows Security Bypass (2.4)
-
CWE-264
High
WordPress Plugin Gantry 5 Framework Cross-Site Scripting (5.4.8)
-
CWE-79
High
WordPress Plugin Hellodialog Unspecified Vulnerability (1.0.2)
-
-
High
WordPress Plugin JS Support Ticket Unspecified Vulnerability (1.1.1)
-
-
High
WordPress Plugin Kama Click Counter SQL Injection (3.4.9)
CVE-2017-18614
CWE-89
High
WordPress Plugin LazyEater Multiple Unspecified Vulnerabilities (1.2.4)
-
-
High
WordPress Plugin Mail Masta Multiple SQL Injection Vulnerabilities (1.0)
CVE-2017-6578
CWE-89
High
WordPress Plugin Maintenance Mode Under Construction Page Landing Page Possible Remote Code Execution (1.0.9)
CVE-2016-10045
CWE-94
High
WordPress Plugin moreAds SE Open Redirect (1.4.8)
-
CWE-601
High