Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WP Responsive Tabs horizontal vertical and accordion Tabs Unspecified Vulnerability (1.1.1)
-
-
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Unspecified Vulnerability (2.4.3)
-
-
High
WordPress Plugin WP Support Plus Responsive Ticket System Cross-Site Scripting (9.1.1)
CVE-2019-7299
CWE-79
High
WordPress Plugin WPFront User Role Editor Unspecified Vulnerability (2.14.1)
-
-
High
WordPress Plugin Abandoned Cart Pro for WooCommerce Cross-Site Scripting (7.11.1)
-
CWE-79
High
WordPress Plugin Analytics-Gtag Restricted File Upload (1.8.1)
-
CWE-79
High
WordPress Plugin article2pdf Multiple Vulnerabilities (0.27)
CVE-2019-1010257
CWE-538
High
WordPress Plugin Best Image Gallery & Responsive Photo Gallery-FooGallery Security Bypass (1.6.15)
-
CWE-264
High
WordPress Plugin Better Search Replace Cross-Site Request Forgery (1.3.2)
-
CWE-352
High
WordPress Plugin Better Search SQL Injection (2.2.2)
-
CWE-89
High
WordPress Plugin Blogger To WordPress SQL Injection (2.2.1)
-
CWE-89
High
WordPress Plugin Booking calendar, Appointment Booking System Security Bypass (2.2.2)
CVE-2018-10363
CWE-264
High
WordPress Plugin Caldera Forms-More Than Contact Forms Arbitrary File Disclosure (1.8.1)
-
CWE-538
High
WordPress Plugin Contact Form Builder-a plugin for creating contact and feedback forms Cross-Site Request Forgery (1.0.68)
CVE-2019-11557
CWE-352
High
WordPress Plugin Contact Form by WD-responsive drag & drop contact form builder tool Cross-Site Request Forgery (1.13.4)
CVE-2019-11591
CWE-352
High
WordPress Plugin Easy Watermark Security Bypass (0.7.0)
-
CWE-264
High
WordPress Plugin Easy WP SMTP PHP Object Injection (1.3.9)
-
CWE-915
High
WordPress Plugin easyping-website subscriptions done right PHP Object Injection (0.0.1)
-
CWE-915
High
WordPress Plugin Essential Addons for Elementor Server-Side Request Forgery (2.9.8)
-
CWE-918
High
WordPress Plugin Estatik Real Estate Cross-Site Request Forgery (3.8.3)
-
CWE-352
High
WordPress Plugin FooBox Image Lightbox Security Bypass (2.6.3)
-
CWE-264
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Request Forgery (1.13.4)
CVE-2019-11590
CWE-352
High
WordPress Plugin Google Forms Unspecified Vulnerability (0.93)
-
-
High
WordPress Plugin GraceMedia Media Player Local File Inclusion (1.0)
CVE-2019-9618
CWE-22
High
WordPress Plugin GTM4WP Cross-Site Scripting (1.9)
-
CWE-79
High
WordPress Plugin Image Photo Gallery Final Tiles Grid Security Bypass (3.3.52)
-
CWE-264
High
WordPress Plugin Import and export users and customers Multiple Vulnerabilities (1.14.0.2)
CVE-2019-15329
CWE-352
High
WordPress Plugin Livemesh Addons for Elementor Security Bypass (2.5.2)
-
CWE-264
High
WordPress Plugin Livemesh SiteOrigin Widgets Security Bypass (2.5.1)
-
CWE-264
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Security Bypass (3.1.6)
-
CWE-264
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Security Bypass (1.7.29)
-
CWE-264
High
WordPress Plugin Post Snippets Security Bypass (3.0.5)
-
CWE-264
High
WordPress Plugin Responsive Filterable Portfolio Unspecified Vulnerability (1.0.8)
-
-
High
WordPress Plugin Social Share Icons & Social Share Buttons Security Bypass (3.0.2)
-
CWE-264
High
WordPress Plugin Sooqr Search Restricted File Upload (1.1.4)
-
CWE-79
High
WordPress Plugin Stop User Enumeration Security Bypass (1.3.18)
-
CWE-264
High
WordPress Plugin Widgets for SiteOrigin Security Bypass (1.4.2)
-
CWE-264
High
WordPress Plugin WooCommerce Cross-Site Scripting (3.5.4)
CVE-2019-9168
CWE-79
High
WordPress Plugin Woocommerce User Email Verification Security Bypass (3.3.0)
-
CWE-264
High
WordPress Plugin WordPress Social Share Buttons & Analytics-GetSocial.io Cross-Site Request Forgery (4.2)
-
CWE-352
High
WordPress Plugin Social Sharing-Social Warfare Multiple Vulnerabilities (3.5.2)
CVE-2019-9978
CWE-94
High
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Multiple Security Bypass Vulnerabilities (8.0)
-
CWE-264
High
WordPress Plugin WP Database Backup Cross-Site Scripting (5.1.1)
CVE-2019-14949
CWE-79
High
WordPress Plugin WP fail2ban Security Bypass (4.0.2)
-
CWE-264
High
WordPress Plugin WP Mobile Menu-The Mobile-Friendly Responsive Menu Security Bypass (2.7.2)
-
CWE-264
High
WordPress Plugin WP Social Feed Gallery Unspecified Vulnerability (2.1.1)
-
-
High
WordPress Plugin 404page-your smart custom 404 error page Cross-Site Request Forgery (10.3)
-
CWE-352
High
WordPress Plugin A2 Optimized WP Information Disclosure (2.0.10.8)
-
CWE-200
High
WordPress Plugin Advanced Contact form 7 DB SQL Injection (1.6.0)
-
CWE-89
High
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Local File Inclusion (4.18.63)
-
CWE-22
High
WordPress Plugin ApplyOnline-Application Form Builder and Manager Arbitrary File Disclosure (1.9.92)
-
CWE-538
High
WordPress Plugin ARI Adminer-WordPress Database Manager Cross-Site Request Forgery (1.1.13)
-
CWE-352
High
WordPress Plugin Child Themes Helper Multiple Vulnerabilities (2.0)
-
CWE-538
High
WordPress Plugin Duplicate Page SQL Injection (3.3)
-
CWE-89
High
WordPress Plugin Easy Updates Manager Privilege Escalation (8.0.4)
CVE-2019-15650
CWE-264
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (4.0.13)
-
CWE-79
High
WordPress Plugin Groundhogg-Marketing Automation & CRM for WordPress Remote Code Execution (1.3.4)
CVE-2019-15647
CWE-94
High
WordPress Plugin Instagram Feed Unspecified Vulnerability (1.11.3)
-
-
High
WordPress Plugin LeaderBoard Cross-Site Request Forgery (1.1.1)
-
CWE-352
High
WordPress Plugin Loco Translate Local File Inclusion (2.2.1)
-
CWE-22
High
WordPress Plugin Login No Captcha reCAPTCHA Security Bypass (1.4.1)
-
CWE-264
High
WordPress Plugin pipdig Power pack (p3) Backdoor (4.7.3)
-
CWE-95
High
WordPress Plugin Related Posts Cross-Site Scripting (5.12.91)
CVE-2019-11869
CWE-79
High
WordPress Plugin Resize Image After Upload Cross-Site Request Forgery (1.8.5)
-
CWE-352
High
WordPress Plugin RSS Redirect & Feedburner Alternative Unspecified Vulnerability (1.9)
-
-
High
WordPress Plugin Simple Ajax Shoutbox SQL Injection (2.2.1)
-
CWE-89
High
WordPress Plugin SMTP Mailer Cross-Site Request Forgery (1.0.6)
-
CWE-352
High
WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Scripting (2.1.7)
-
CWE-79
High
WordPress Plugin Social Share Icons & Social Share Buttons Cross-Site Scripting (3.0.5)
-
CWE-79
High
WordPress Plugin SupportCandy Arbitrary File Upload (2.0.0)
CVE-2019-11223
CWE-434
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Request Forgery (2.0.39)
CVE-2019-10673
CWE-352
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Unspecified Vulnerability (2.0.40)
-
-
High
WordPress Plugin Ultimate Responsive Image Slider Unspecified Vulnerability (3.3.2)
-
-
High
WordPress Plugin Visual CSS Style Editor Security Bypass (7.1.9)
CVE-2019-11886
CWE-264
High
WordPress Plugin W3 Total Cache Arbitrary File Disclosure (0.9.3)
CVE-2019-6715
CWE-538
High