Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12791 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Security Bypass (3.4.4)
-
CWE-287
High
WordPress Plugin Manage and respond to conversations with leads-HappyForms PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (4.1.6)
-
CWE-79
High
WordPress Plugin Newsletters PHP Object Injection (4.6.8.5)
-
CWE-915
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability (2.2.46)
CVE-2018-7586
-
High
WordPress Plugin Simple Instagram Feed Cross-Site Scripting (1.3)
-
CWE-79
High
WordPress Plugin Site Editor-WordPress Site Builder-Theme Builder and Page Builder Local File Inclusion (1.1.1)
CVE-2018-7422
CWE-22
High
WordPress Plugin WL Katalogsok PHP Object Injection (3.5.4)
-
CWE-915
High
WordPress Plugin WooCommerce Save For Later Cart Enhancement PHP Object Injection (1.0.6)
-
CWE-915
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Multiple Vulnerabilities (1.1.9)
CVE-2018-8711
CWE-94
High
WordPress Plugin WordPress Social Share, Social Login and Social Comments-Super Socializer Security Bypass (7.10.6)
-
CWE-287
High
WordPress Plugin 10Web Social Feed for Instagram Multiple Cross-Site Scripting Vulnerabilities (1.3.0)
CVE-2018-10301
CWE-79
High
WordPress Plugin Buddypress Xprofile Custom Fields Type Arbitrary File Deletion (2.6.3)
-
CWE-73
High
WordPress Plugin Caldera Forms-More Than Contact Forms Multiple Cross-Site Scripting Vulnerabilities (1.5.9.1)
CVE-2018-7747
CWE-79
High
WordPress Plugin Contact Form DB CSV Injection (2.10.32)
CVE-2018-9035
CWE-20
High
WordPress Plugin Disc Golf Manager PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.3)
CVE-2018-0576
CWE-79
High
WordPress Plugin Google Drive for WordPress Arbitrary File Deletion (2.2)
-
CWE-73
High
WordPress Plugin Like Button Rating-LikeBtn Security Bypass (2.5.3)
-
CWE-264
High
WordPress Plugin My Calendar Cross-Site Scripting (2.5.16)
-
CWE-79
High
WordPress Plugin My WordPress Login Logo Multiple Unspecified Vulnerabilities (2.1)
-
-
High
WordPress Plugin Open Graph for Facebook, Google+ and Twitter Card Tags Cross-Site Scripting (2.2.4)
CVE-2018-0579
CWE-79
High
WordPress Plugin PixelYourSite-Facebook Pixel (Events, WooCommerce & Easy Digital Downloads) Cross-Site Scripting (5.2.1)
CVE-2018-0578
CWE-79
High
WordPress Plugin Rating-Widget:Star Review System Cross-Site Scripting (2.8.8)
-
CWE-79
High
WordPress Plugin Rating-Widget:Star Review System Security Bypass (2.8.9)
-
CWE-264
High
WordPress Plugin Relevanssi-A Better Search Cross-Site Scripting (4.0.4)
CVE-2018-9034
CWE-79
High
WordPress Plugin Relevanssi-A Better Search SQL Injection (3.6.0)
-
CWE-89
High
WordPress Plugin Responsive Cookie Consent Cross-Site Scripting (1.7)
CVE-2018-10309
CWE-79
High
WordPress Plugin Simple Fields Local File Inclusion (0.3.5)
-
CWE-22
High
WordPress Plugin Synchi Arbitrary File Deletion (5.1)
-
CWE-73
High
WordPress Plugin UK Cookie Consent Cross-Site Scripting (2.3.9)
CVE-2018-10310
CWE-79
High
WordPress Plugin VRView Cross-Site Scripting (1.1.3)
-
CWE-79
High
WordPress Plugin Woo Import Export Arbitrary File Deletion (1.0)
-
CWE-73
High
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.2)
CVE-2018-9172
CWE-79
High
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.3)
CVE-2018-9844
CWE-79
High
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Scripting (4.0.3)
CVE-2018-0577
CWE-79
High
WordPress Plugin WP Activity Log Information Disclosure (3.1.1)
CVE-2018-8719
CWE-200
High
WordPress Plugin WP Background Takeover Directory Traversal (4.1.4)
CVE-2018-9118
CWE-22
High
WordPress Plugin WP Image Zoom Denial of Service (1.23)
-
CWE-400
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (8.0.05)
CVE-2018-9864
CWE-79
High
WordPress Plugin WP-VR-view-Add Photo Sphere, 360 video to WordPress Cross-Site Scripting (1.6)
-
CWE-79
High
WordPress Plugin WP with Spritz Local/Remote File Inclusion (1.0)
-
CWE-98
High
WordPress Plugin CF7 Invisible reCAPTCHA Cross-Site Scripting (1.3.1)
CVE-2018-21012
CWE-79
High
WordPress Plugin Custom css-js-php Unspecified Vulnerability (2.0.2)
-
-
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (3.4.12)
-
CWE-79
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder CSV Injection (1.12.22)
CVE-2018-10504
CWE-20
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Multiple Vulnerabilities (1.12.25)
-
CWE-89
High
WordPress Plugin GD bbPress Attachments Cross-Site Scripting (2.5)
-
CWE-79
High
WordPress Plugin Google Drive for WordPress Information Disclosure (2.2)
-
CWE-538
High
WordPress Plugin Loginizer Cross-Site Scripting (1.3.9)
CVE-2018-11366
CWE-79
High
WordPress Plugin Mass Pages/Posts Creator Cross-Site Scripting (1.2.2)
CVE-2018-11580
CWE-79
High
WordPress Plugin Metronet Tag Manager Cross-Site Request Forgery (1.2.7)
-
CWE-352
High
WordPress Plugin Page and Post Clone Information Disclosure (1.1)
-
CWE-200
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Arbitrary File Upload (2.7.4)
-
CWE-434
High
WordPress Plugin Peugeot Music Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Remote Code Execution (2.8.5)
CVE-2019-15873
CWE-94
High
WordPress Plugin Simple Contact Info Arbitrary File Deletion (1.1.9)
-
CWE-73
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Request Forgery (2.0.6)
CVE-2018-10233
CWE-352
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.10)
CVE-2018-10234
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Vulnerabilities (1.3.88)
CVE-2018-0590
CWE-434
High
WordPress Plugin WF Cookie Consent Cross-Site Scripting (1.1.3)
CVE-2018-10371
CWE-79
High
WordPress Plugin Woocommerce Category Banner Management Security Bypass (1.1.1)
CVE-2018-11579
CWE-264
High
WordPress Plugin WooCommerce Checkout For Digital Goods Cross-Site Request Forgery (2.2)
-
CWE-352
High
WordPress Plugin WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Multiple Vulnerabilities (1.8)
-
CWE-352
High
WordPress Plugin WooCommerce Product Attachment Cross-Site Scripting (1.1.2)
-
CWE-79
High
WordPress Plugin WooCommerce Quick Reports Cross-Site Scripting (1.0.6)
-
CWE-79
High
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Scripting (4.0.4)
-
CWE-79
High
WordPress Plugin WordPress Survey & Poll-Quiz, Survey and Poll PHP Object Injection (1.5.5)
-
CWE-915
High
WordPress Plugin WP Booking Calendar Multiple Vulnerabilities (3.0.0)
-
CWE-89
High
WordPress Plugin WP Booking Cross-Site Scripting (1.4)
-
CWE-79
High
WordPress Plugin WP Docs Multiple Vulnerabilities (1.1.7)
-
CWE-915
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (8.0.07)
CVE-2018-11105
CWE-79
High
WordPress Plugin WP Pipes Unspecified Vulnerability (1.28)
-
-
High
WordPress Plugin WP ULike Cross-Site Scripting (3.1)
-
CWE-79
High
WordPress Plugin WP ULike Multiple Vulnerabilities (3.1)
-
CWE-352
High