Invicti named a Leader in IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Read now.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
MSSP
Partners
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ High Severity
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
High Severity Vulnerabilities
Found
13355 vulnerabilities
at
High
severity.
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Car Rental by BestWebSoft Cross-Site Scripting (1.0.4)
CVE-2017-2171
CWE-79
High
WordPress Plugin Contact Form 7 Database Multiple Vulnerabilities (1.1)
-
CWE-352
High
WordPress Plugin Contact Form by BestWebSoft Cross-Site Scripting (4.0.5)
CVE-2017-18491
CWE-79
High
WordPress Plugin Contact Form Multi by BestWebSoft Cross-Site Scripting (1.2.0)
CVE-2017-18490
CWE-79
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress Cross-Site Scripting (1.5.6)
CVE-2017-18492
CWE-79
High
WordPress Plugin CopySafe Web Protection Cross-Site Request Forgery (2.5)
CVE-2017-8100
CWE-352
High
WordPress Plugin Custom Admin Page by BestWebSoft Cross-Site Scripting (0.1.1)
CVE-2017-18493
CWE-79
High
WordPress Plugin Custom Fields Search by BestWebSoft Cross-Site Scripting (1.3.1)
CVE-2017-2171
CWE-79
High
WordPress Plugin Custom Search by BestWebSoft Cross-Site Scripting (1.35)
CVE-2017-18494
CWE-79
High
WordPress Plugin Donate by BestWebSoft Cross-Site Scripting (2.1.1)
CVE-2017-2171
CWE-79
High
WordPress Plugin DosCero.Menu Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Dynamic Featured Image Unspecified Vulnerability (1.0.3)
-
-
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Information Disclosure (2.7.6)
-
CWE-200
High
WordPress Plugin Easy Forms for MailChimp Unspecified Vulnerability (6.3.11)
-
-
High
WordPress Plugin Email Queue by BestWebSoft Cross-Site Scripting (1.1.1)
CVE-2017-2171
CWE-79
High
WordPress Plugin Error Log Viewer by BestWebSoft Cross-Site Scripting (1.0.5)
CVE-2017-18562
CWE-79
High
WordPress Plugin Export any WordPress data to XML/CSV Arbitrary File Upload (0.9)
-
CWE-434
High
WordPress Plugin Facebook Button by BestWebSoft Cross-Site Scripting (2.53)
CVE-2017-2171
CWE-79
High
WordPress Plugin Featured Posts by BestWebSoft Cross-Site Scripting (1.0.0)
CVE-2017-2171
CWE-79
High
WordPress Plugin Gallery by BestWebSoft Cross-Site Scripting (4.4.9)
CVE-2017-2171
CWE-79
High
WordPress Plugin Gallery Categories by BestWebSoft Cross-Site Scripting (1.0.8)
CVE-2017-2171
CWE-79
High
WordPress Plugin Gallery-Video Gallery and Youtube Gallery SQL Injection (2.0.9)
-
CWE-89
High
WordPress Plugin GlotPress Information Disclosure (2.2.1)
-
CWE-200
High
WordPress Plugin Google +1 by BestWebSoft Cross-Site Scripting (1.3.3)
CVE-2017-2171
CWE-79
High
WordPress Plugin Google AdSense by BestWebSoft Cross-Site Scripting (1.43)
CVE-2017-18487
CWE-79
High
WordPress Plugin Google Analytics by BestWebSoft Cross-Site Scripting (1.7.0)
CVE-2017-18556
CWE-79
High
WordPress Plugin Google Captcha (reCAPTCHA) by BestWebSoft Cross-Site Scripting (1.27)
CVE-2017-2171
CWE-79
High
WordPress Plugin Google Doc Embedder Multiple Vulnerabilities (2.6.1)
-
CWE-352
High
WordPress Plugin Google Maps by BestWebSoft Cross-Site Scripting (1.3.5)
CVE-2017-18557
CWE-79
High
WordPress Plugin Google Shortlink by BestWebSoft Cross-Site Scripting (1.5.2)
CVE-2017-2171
CWE-79
High
WordPress Plugin Google Sitemap by BestWebSoft Cross-Site Scripting (3.0.7)
CVE-2017-2171
CWE-79
High
WordPress Plugin Htaccess by BestWebSoft Cross-Site Scripting (1.7.5)
CVE-2017-18496
CWE-79
High
WordPress Plugin Image Gallery with Slideshow Multiple Vulnerabilities (1.5.2)
CVE-2017-1002015
CWE-89
High
WordPress Plugin Image Rotator Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin IP Geo Block Security Bypass (2.2.2)
-
CWE-264
High
WordPress Plugin Job Board by BestWebSoft Cross-Site Scripting (1.1.3)
CVE-2017-2171
CWE-79
High
WordPress Plugin KittyCatfish Ads by Missilesilo SQL Injection (2.2)
-
CWE-89
High
WordPress Plugin Latest Posts by BestWebSoft Cross-Site Scripting (0.2)
CVE-2017-2171
CWE-79
High
WordPress Plugin Lightbox Jquery Possible Remote Code Execution (0.24)
-
CWE-94
High
WordPress Plugin Limit Attempts by BestWebSoft Cross-Site Scripting (1.1.7)
CVE-2017-2171
CWE-79
High
WordPress Plugin LinkedIn by BestWebSoft Cross-Site Scripting (1.0.4)
CVE-2017-18516
CWE-79
High
WordPress Plugin Login With Ajax Cross-Site Scripting (3.1.6)
-
CWE-79
High
WordPress Plugin MailChimp Forms by MailMunch Unspecified Vulnerability (2.0.6.3)
-
-
High
WordPress Plugin Mobile Device Detection by 51Degrees Cross-Site Scripting (3.1.5.2)
-
CWE-79
High
WordPress Plugin Multilanguage by BestWebSoft Cross-Site Scripting (1.2.1)
CVE-2017-2171
CWE-79
High
WordPress Plugin MW WP Form Cross-Site Scripting (2.10.0)
-
CWE-79
High
WordPress Plugin Pagination by BestWebSoft Cross-Site Scripting (1.0.6)
CVE-2017-18527
CWE-79
High
WordPress Plugin PDF & Print by BestWebSoft Cross-Site Scripting (1.9.3)
CVE-2017-18528
CWE-79
High
WordPress Plugin Pinterest by BestWebSoft Cross-Site Scripting (1.0.4)
CVE-2017-18517
CWE-79
High
WordPress Plugin Popular Posts by BestWebSoft Cross-Site Scripting (1.0.4)
CVE-2017-2171
CWE-79
High
WordPress Plugin Portfolio by BestWebSoft Cross-Site Scripting (2.39)
CVE-2017-2171
CWE-79
High
WordPress Plugin Post Grid, List for WordPress-Content Views Cross-Site Scripting (1.9.0)
-
CWE-79
High
WordPress Plugin Post to CSV by BestWebSoft Cross-Site Scripting (1.3.0)
CVE-2017-2171
CWE-79
High
WordPress Plugin Post Type Switcher Multiple Unspecified Vulnerabilities (1.5.0)
-
-
High
WordPress Plugin Profile Extra Fields by BestWebSoft Cross-Site Scripting (1.0.7)
CVE-2017-2171
CWE-79
High
WordPress Plugin PromoBar by BestWebSoft Cross-Site Scripting (1.1.0)
CVE-2017-18529
CWE-79
High
WordPress Plugin Quotes and Tips by BestWebSoft Cross-Site Scripting (1.32)
CVE-2017-2171
CWE-79
High
WordPress Plugin Rating by BestWebSoft Cross-Site Scripting (0.1)
CVE-2017-18530
CWE-79
High
WordPress Plugin Re-attacher by BestWebSoft Cross-Site Scripting (1.0.8)
CVE-2017-2171
CWE-79
High
WordPress Plugin Realty by BestWebSoft Cross-Site Scripting (1.0.9)
CVE-2017-18532
CWE-79
High
WordPress Plugin Relevant-Related Posts by BestWebSoft Cross-Site Scripting (1.1.9)
CVE-2017-2171
CWE-79
High
WordPress Plugin Rimons Twitter Widget Cross-Site Scripting (1.2.4)
-
CWE-79
High
WordPress Plugin Search Everything SQL Injection (8.1.6)
-
CWE-89
High
WordPress Plugin Sender by BestWebSoft Cross-Site Scripting (1.2.0)
CVE-2017-18564
CWE-79
High
WordPress Plugin SendGrid Cross-Site Scripting (1.10.7)
-
CWE-79
High
WordPress Plugin Simple Job Board Cross-Site Scripting (2.4.3)
-
CWE-79
High
WordPress Plugin Slideshow Gallery LITE Multiple Cross-Site Scripting Vulnerabilities (1.6.5)
CVE-2018-17946
CWE-79
High
WordPress Plugin SMTP by BestWebSoft Cross-Site Scripting (1.0.9)
CVE-2017-18518
CWE-79
High
WordPress Plugin Social Buttons Pack by BestWebSoft Cross-Site Scripting (1.1.0)
CVE-2017-18500
CWE-79
High
WordPress Plugin Social Login by BestWebSoft Cross-Site Scripting (0.1)
CVE-2017-18501
CWE-79
High
WordPress Plugin Social Media Flying Icons-Floating Social Media Icon Multiple Unspecified Vulnerabilities (4.2.3)
-
-
High
WordPress Plugin Subscriber by BestWebSoft Cross-Site Scripting (1.3.4)
CVE-2017-18502
CWE-79
High
WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.1.9)
-
CWE-79
High
WordPress Plugin Testimonials by BestWebSoft Cross-Site Scripting (0.1.8)
CVE-2017-18558
CWE-79
High
WordPress Plugin TheCartPress eCommerce Shopping Cart Multiple Vulnerabilities (1.5.3.6)
-
CWE-434
High
« Previous
1
...
114
115
116
117
118
119
120
121
...
179
Next »