Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Media Library Assistant Multiple Cross-Site Scripting Vulnerabilities (2.73)
-
CWE-79
High
WordPress Plugin Multi Step Form Multiple Cross-Site Scripting Vulnerabilities (1.2.5)
CVE-2018-14846
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Vulnerabilities (3.3.13)
CVE-2018-16308
CWE-79
High
WordPress Plugin Plainview Activity Monitor Remote Command Execution (20161228)
CVE-2018-15877
CWE-94
High
WordPress Plugin Snazzy Maps Multiple Cross-Site Scripting Vulnerabilities (1.1.3)
CVE-2018-17947
CWE-79
High
WordPress Plugin Strong Testimonials Multiple Cross-Site Scripting Vulnerabilities (2.31.4)
-
CWE-79
High
WordPress Plugin Tagregator Cross-Site Scripting (0.6)
CVE-2018-10752
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Arbitrary File Upload (2.0.21)
-
CWE-434
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.21)
-
CWE-79
High
WordPress Plugin Woocommerce Aliexpress Dropshipping Lite PHP Object Injection (1.0.1)
-
CWE-915
High
WordPress Plugin Woocommerce CSV importer Unspecified Vulnerability (3.4.0)
-
-
High
WordPress Plugin WooCommerce Potential PHP Object Injection (3.4.4)
-
CWE-915
High
WordPress Plugin Advanced Contact form 7 DB Arbitrary File Upload (1.4.4)
-
CWE-434
High
WordPress Plugin Contact Form 7 Privilege Escalation (5.0.3)
-
CWE-264
High
WordPress Plugin Duplicator-WordPress Migration Remote Code Execution (1.2.40)
-
CWE-94
High
WordPress Plugin Events Made Easy PHP Object Injection (2.0.52)
-
CWE-915
High
WordPress Plugin File Manager Cross-Site Scripting (2.9)
CVE-2018-16363
CWE-79
High
WordPress Plugin File Manager Unspecified Vulnerability (3.0)
-
-
High
WordPress Plugin Image Intense SQL Injection (3.2.5)
-
CWE-89
High
WordPress Plugin Jibu Pro Cross-Site Scripting (1.7)
CVE-2018-17138
CWE-79
High
WordPress Plugin Localize My Post Local File Inclusion (1.0)
CVE-2018-16299
CWE-22
High
WordPress Plugin Quizlord Cross-Site Scripting (2.0)
CVE-2018-17140
CWE-79
High
WordPress Plugin Unyson Information Disclosure (2.7.18)
-
CWE-200
High
WordPress Plugin UserPro-Community and User Profile Cross-Site Scripting (4.9.23)
CVE-2018-16285
CWE-79
High
WordPress Plugin Wechat Broadcast Local/Remote File Inclusion (1.2.0)
CVE-2018-16283
CWE-98
High
WordPress Plugin WP Doctor Potential Malicious Code (1.7)
-
CWE-506
High
WordPress Plugin Arigato Autoresponder and Newsletter Remote Code Execution (2.5.1.9)
CVE-2018-18461
CWE-94
High
WordPress Plugin Bitcoin Faucet Cross-Site Scripting (1.0.12)
-
CWE-79
High
WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler PHP Object Injection (5.0.0)
-
CWE-915
High
WordPress Plugin Breadcrumb NavXT Information Disclosure (6.1.0)
-
CWE-200
High
WordPress Plugin Chat-Support Board-WordPress Chat Cross-Site Scripting (1.2.8)
CVE-2018-18373
CWE-79
High
WordPress Plugin Companion Auto Update Multiple Vulnerabilities (3.2.0)
-
CWE-352
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (3.5.13)
-
CWE-264
High
WordPress Plugin Event Calendar WD-Responsive Event Calendar Multiple Cross-Site Scripting Vulnerabilities (1.1.21)
CVE-2018-16164
CWE-79
High
WordPress Plugin Feed Them Social-for Twitter feed, Youtube and more Cross-Site Scripting (2.5.2.1)
-
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.2.0.727)
-
CWE-79
High
WordPress Plugin HDInvoice-Create Invoices Arbitrary File Upload (0.1)
-
CWE-434
High
WordPress Plugin Magee Shortcodes Cross-Site Scripting (1.6.3)
-
CWE-79
High
WordPress Plugin PDF & Print by BestWebSoft Cross-Site Scripting (2.0.2)
-
CWE-79
High
WordPress Plugin Product Addons & Fields for WooCommerce Same Origin Method Execution (SOME) (14.0)
CVE-2016-4566
CWE-79
High
WordPress Plugin Product Addons & Fields for WooCommerce Unspecified Vulnerability (13.7)
-
-
High
WordPress Plugin Pym.js Embeds Cross-Site Scripting (1.3.2)
-
CWE-79
High
WordPress Plugin Question Answer Multiple Cross-Site Scripting Vulnerabilities (1.2.30)
-
CWE-79
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Scripting (6.2.1)
CVE-2019-9575
CWE-79
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Cross-Site Scripting (3.0.17)
-
CWE-79
High
WordPress Plugin Tajer Arbitrary File Upload (1.0.5)
CVE-2018-9206
CWE-434
High
WordPress Plugin Testimonial Slider Multiple Cross-Site Scripting Vulnerabilities (1.2.5)
-
CWE-79
High
WordPress Plugin Tigris for Salesforce PHP Object Injection (1.1.3)
-
CWE-915
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.25)
-
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Cross-Site Scripting Vulnerabilities (2.0.27)
CVE-2018-17866
CWE-79
High
WordPress Plugin VendorFuel Local File Overwrite (1.3.1)
-
CWE-73
High
WordPress Plugin WebARX Cross-Site Scripting (1.3.0)
CVE-2019-17213
CWE-79
High
WordPress Plugin WooCommerce Arbitrary File Deletion (3.4.5)
CVE-2018-20714
CWE-73
High
WordPress Plugin WooCommerce Cart Expiration PHP Object Injection (0.1.0)
-
CWE-915
High
WordPress Plugin Wordfence Security-Firewall & Malware Scan Multiple Vulnerabilities (7.1.12)
-
CWE-264
High
WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Cross-Site Scripting (5.0.6)
-
CWE-79
High
WordPress Plugin WP DSGVO Tools (GDPR) PHP Object Injection (2.0.4)
-
CWE-915
High
WordPress Plugin WP Fastest Cache Unspecified Vulnerability (0.8.8.5)
-
-
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (8.0.17)
CVE-2019-9913
CWE-79
High
WordPress Plugin WP Sudoku Plus Unspecified Vulnerability (1.4)
-
-
High
WordPress Plugin WPML (WordPress Multilingual) Cross-Site Scripting (3.6.3)
CVE-2018-18069
CWE-79
High
WordPress Plugin AMP for WP-Accelerated Mobile Pages Security Bypass (0.9.97.19)
-
CWE-264
High
WordPress Plugin ARForms:Wordpress Form Builder Arbitrary File Deletion (3.5.1)
-
CWE-73
High
WordPress Plugin Best Image Gallery & Responsive Photo Gallery-FooGallery Cross-Site Scripting (1.4.31)
-
CWE-79
High
WordPress Plugin Better WordPress reCAPTCHA (with no CAPTCHA reCAPTCHA) Cross-Site Scripting (2.0.3)
-
CWE-79
High
WordPress Plugin Calendar Event Multi View Unspecified Vulnerability (1.3.58)
-
-
High
WordPress Plugin Calendar Unspecified Vulnerability (1.3.10)
-
-
High
WordPress Plugin Coming Soon & Maintenance Mode Page PHP Object Injection (1.42)
-
CWE-915
High
WordPress Plugin Coming Soon & Maintenance Mode Page Unspecified Vulnerability (1.40)
-
-
High
WordPress Plugin Community by PeepSo-Social Network, Membership, Registration, User Profiles Multiple Vulnerabilities (1.11.5)
-
CWE-89
High
WordPress Plugin Contact Form Email Information Disclosure (1.2.66)
-
CWE-200
High
WordPress Plugin Contact Form Email Multiple Vulnerabilities (1.2.65)
CVE-2019-9646
CWE-352
High
WordPress Plugin Custom Frontend Login Registration Form Multiple Cross-Site Scripting Vulnerabilities (1.01)
-
CWE-79
High
WordPress Plugin Custom Login Page Customizer-LoginPress Multiple Vulnerabilities (1.1.13)
CVE-2019-15872
CWE-264
High
WordPress Plugin Divi Builder Cross-Site Scripting (2.17.2)
-
CWE-79
High