High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name

CVE

CWE

Severity

WordPress Plugin Appointments Cross-Site Scripting (2.2.2.2)

-

CWE-79

High

WordPress Plugin bbPress SQL Injection (2.5.14)

-

CWE-89

High

WordPress Plugin Boozang Cross-Site Scripting (1.1)

-

CWE-79

High

WordPress Plugin Breezing Forms Cross-Site Scripting (1.2.7.42)

-

CWE-79

High

WordPress Plugin Cartogiraffe Map Cross-Site Scripting (1.0)

-

CWE-79

High

WordPress Plugin DFD Reddcoin Tips Cross-Site Scripting (1.1.1)

-

CWE-79

High

WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (1.2.28)

CVE-2017-16815

CWE-79

High

WordPress Plugin Emag Marketplace Connector Cross-Site Scripting (1.0.0)

CVE-2017-17043

CWE-79

High

WordPress Plugin Email Log Cross-Site Scripting (2.2.2)

-

CWE-79

High

WordPress Plugin Event List PHP Object Injection (0.7.10)

-

CWE-915

High

WordPress Plugin Events SQL Injection (2.3.4)

-

CWE-89

High

WordPress Plugin External Media without Import Cross-Site Scripting (1.0.1)

-

CWE-79

High

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Multiple Vulnerabilities (2.05.01)

-

CWE-200

High

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Remote Code Execution (2.05.01)

-

CWE-94

High

WordPress Plugin Front-End Only Users Cross-Site Scripting (3.1.10)

-

CWE-79

High

WordPress Plugin InLinks SQL Injection (1.0)

CVE-2017-16955

CWE-89

High

WordPress Plugin JTRT Responsive Tables SQL Injection (4.1)

-

CWE-89

High

WordPress Plugin Poll, Survey, Questionnaire and Voting system SQL Injection (1.2.4)

-

CWE-89

High

WordPress Plugin Product Catalog PHP Object Injection (4.2.25)

-

CWE-915

High

WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Unspecified Vulnerability (2.6.4)

-

-

High

WordPress Plugin Secure HTML5 Video Player Cross-Site Scripting (3.14)

-

CWE-79

High

WordPress Plugin Simple Events Calendar SQL Injection (1.3.5)

-

CWE-89

High

WordPress Plugin TablePress XML External Entity Injection (1.8)

CVE-2017-10889

CWE-611

High

WordPress Plugin Ultimate Instagram Feed Cross-Site Scripting (1.2)

CVE-2017-16758

CWE-79

High

WordPress Plugin Ultimate Instagram Feed Unspecified Vulnerability (1.3)

-

-

High

WordPress Plugin UserPro-Community and User Profile Security Bypass (4.9.17)

CVE-2017-16562

CWE-287

High

WordPress Plugin Weather for us-animated weather widget Crypto Mining (1.8)

-

CWE-829

High

WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Remote Code Execution (5.0.0)

-

CWE-94

High

WordPress Plugin WP Mail Logging Cross-Site Scripting (1.8.2)

-

CWE-79

High

WordPress Plugin WP Post Popup Directory Traversal (2.1.1)

-

CWE-22

High

WordPress Plugin WP Support Plus Responsive Ticket System Unspecified Vulnerability (8.0.7)

-

-

High

WordPress Plugin Yoast SEO Cross-Site Scripting (5.7.1)

CVE-2017-16842

CWE-79

High

WordPress Plugin AccessPress Anonymous Post Pro Arbitrary File Upload (3.1.9)

CVE-2017-16949

CWE-434

High

WordPress Plugin Apocalypse Meow Security Bypass (21.2.7)

-

CWE-287

High

WordPress Plugin Booking Calendar-Clockwork SMS Cross-Site Scripting (1.0.5)

CVE-2017-17780

CWE-79

High

WordPress Plugin Booking Calendar Local File Inclusion (7.0)

-

CWE-22

High

WordPress Plugin Booking Calendar SQL Injection (6.2.2)

-

CWE-89

High

WordPress Plugin BuddyPress Members Only Cross-Site Scripting (1.8.3)

-

CWE-79

High

WordPress Plugin Captcha Backdoor (4.4.4)

-

CWE-95

High

WordPress Plugin Clockwork SMS Notfications Cross-Site Scripting (2.0.3)

CVE-2017-17780

CWE-79

High

WordPress Plugin Concours Cross-Site Scripting (1.1)

CVE-2017-17719

CWE-79

High

WordPress Plugin Contact Form 7-Clockwork SMS Cross-Site Scripting (2.3.0)

CVE-2017-17780

CWE-79

High

WordPress Plugin Crowd Ideas Cross-Site Scripting (1.0)

-

CWE-79

High

WordPress Plugin Csv Import-Export Multiple Cross-Site Scripting Vulnerabilities (1.1.0)

CVE-2017-17753

CWE-79

High

WordPress Plugin Custom Map Cross-Site Scripting (1.1)

CVE-2017-17744

CWE-79

High

WordPress Plugin Elementor Website Builder Security Bypass (1.7.12)

-

CWE-264

High

WordPress Plugin Elementor Website Builder Unspecified Vulnerability (1.8.8)

-

-

High

WordPress Plugin Fast Secure Contact Form-Clockwork SMS Cross-Site Scripting (2.1.2)

CVE-2017-17780

CWE-79

High

WordPress Plugin Formidable-Clockwork SMS Cross-Site Scripting (1.0.3)

CVE-2017-17780

CWE-79

High

WordPress Plugin Forms:3rd-Party Inject Results Cross-Site Scripting (0.2)

-

CWE-79

High

WordPress Plugin Google Map Backdoor (1.4)

-

CWE-95

High

WordPress Plugin Gravity Forms-Clockwork SMS Cross-Site Scripting (2.2)

CVE-2017-17780

CWE-79

High

WordPress Plugin Itinerary Cross-Site Scripting (1.0.0)

-

CWE-79

High

WordPress Plugin Pinterest Badge Cross-Site Scripting (1.9.0)

-

CWE-79

High

WordPress Plugin Placemarks Cross-Site Scripting (2.0.0)

-

CWE-79

High

WordPress Plugin Qiniu Cloudtuchuang Cross-Site Scripting (1.8)

-

CWE-79

High

WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login Multiple Vulnerabilities (3.7.9.2)

-

CWE-89

High

WordPress Plugin Rich Reviews Multiple Vulnerabilities (1.7.3)

-

CWE-352

High

WordPress Plugin SagePay Server Gateway for WooCommerce Cross-Site Scripting (1.0.8)

CVE-2018-5316

CWE-79

High

WordPress Plugin SendinBlue Subscribe Form And WP SMTP Multiple Unspecified Vulnerabilities (2.7.3)

-

-

High

WordPress Plugin SEO Backdoor (5.0)

-

CWE-95

High

WordPress Plugin Share This Image Cross-Site Scripting (1.03)

CVE-2017-18015

CWE-79

High

WordPress Plugin Smart Marketing SMS and Newsletters Forms Cross-Site Scripting (1.1.1)

CVE-2017-18010

CWE-79

High

WordPress Plugin Super Simple Custom CSS Cross-Site Scripting (1.2)

-

CWE-79

High

WordPress Plugin Table Maker Multiple Vulnerabilities (1.7)

-

CWE-915

High

WordPress Plugin Two-Factor Authentication-Clockwork SMS Cross-Site Scripting (1.0.3)

CVE-2017-17780

CWE-79

High

WordPress Plugin User Role Editor Cross-Site Scripting (4.37)

-

CWE-79

High

WordPress Plugin WooPay-Inicis Cross-Site Scripting (1.1.3)

-

CWE-79

High

WordPress Plugin WordApp Mobile App-Convert your WordPress Site to a Mobile App Cross-Site Scripting (2.0.3)

-

CWE-79

High

WordPress Plugin WordPress Clean Up & Optimizer-Clean Up Optimizer Multiple Unspecified Vulnerabilities (4.0.12)

-

-

High

WordPress Plugin WordPress Clean Up & Optimizer-Clean Up Optimizer SQL Injection (3.0.13)

-

CWE-89

High

WordPress Plugin WP Customer Area Cross-Site Scripting (7.4.2)

-

CWE-79

High

WordPress Plugin WP e-Commerce-Clockwork SMS Cross-Site Scripting (2.0.5)

CVE-2017-17780

CWE-79

High

WordPress Plugin WP Mailster Cross-Site Scripting (1.5.4.0)

CVE-2017-17451

CWE-79

High

WordPress Plugin Wunderbar Basic Cross-Site Scripting (1.1.3)

-

CWE-79

High