Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13071 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Wallable-Social Networking Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin WordPress Download Manager Cross-Site Request Forgery (2.9.60)
-
CWE-352
High
WordPress Plugin Wordpress Forms Multiple Vulnerabilities (0.2.7.1)
-
CWE-915
High
WordPress Plugin WP Events Calendar SQL Injection (1.0)
CVE-2018-5315
CWE-89
High
WordPress Plugin WP GitHub Tools Cross-Site Scripting (1.4.4)
-
CWE-79
High
WordPress Plugin WP No External Links Spam Injection (4.2.2)
-
CWE-610
High
WordPress Plugin WP Retina 2x Cross-Site Scripting (5.2.0)
CVE-2018-0511
CWE-79
High
WordPress Plugin WPGlobus-Multilingual Everything! Multiple Vulnerabilities (1.9.6)
CVE-2018-5367
CWE-352
High
WordPress Plugin WPML Translation Management PHP Object Injection (2.4.1)
-
CWE-915
High
WordPress Plugin YITH WooCommerce Wishlist SQL Injection (2.1.2)
-
CWE-89
High
WordPress Plugin Yoast SEO Unspecified Vulnerability (5.9.2)
-
-
High
WordPress Plugin AMP for WP-Accelerated Mobile Pages Multiple Unspecified Vulnerabilities (0.9.72)
-
-
High
WordPress Plugin Autoship Cloud PHP Object Injection (1.0.13)
-
CWE-915
High
WordPress Plugin Bookly #1 WordPress Booking Plugin (Lite Version) Cross-Site Scripting (14.4)
CVE-2018-6891
CWE-79
High
WordPress Plugin Browsealoud Crypto Mining (1.4)
-
CWE-829
High
WordPress Plugin Category Order and Taxonomy Terms Order PHP Object Injection (1.5.2.2)
-
CWE-915
High
WordPress Plugin cformsII Multiple Cross-Site Scripting Vulnerabilities (14.13.2)
-
CWE-79
High
WordPress Plugin Church Admin Arbitrary File Upload (1.2530)
-
CWE-434
High
WordPress Plugin Convert Docx2post Arbitrary File Upload (1.4)
-
CWE-434
High
WordPress Plugin Custom Permalinks SQL Injection (1.1)
-
CWE-89
High
WordPress Plugin Doctor Appointment Booking Multiple Vulnerabilities (1.0.0)
-
CWE-89
High
WordPress Plugin Flexible Captcha Multiple Vulnerabilities (3.3)
-
CWE-434
High
WordPress Plugin flickrRSS Multiple Vulnerabilities (5.3.1)
CVE-2018-6469
CWE-352
High
WordPress Plugin Help Desk & Knowledgebase Software PHP Object Injection (1.3.11)
-
CWE-915
High
WordPress Plugin Injectbody Spam Injection (All)
-
CWE-610
High
WordPress Plugin Injectscr Spam Injection (All)
-
CWE-610
High
WordPress Plugin Lightbox Multiple Unspecified Vulnerabilities (2.0.7)
-
-
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.2.13)
CVE-2018-7280
CWE-79
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Unspecified Vulnerability (1.3.66)
-
-
High
WordPress Plugin Portfolio Gallery-Photo Gallery Unspecified Vulnerability (2.3.0)
-
-
High
WordPress Plugin PWAMP PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin SG Optimizer Multiple Vulnerabilities (3.3.5)
-
CWE-352
High
WordPress Plugin Share Buttons Cross-Site Scripting (1.3.1)
-
CWE-79
High
WordPress Plugin Spider FAQ Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin tPlayer-Audio Player for WordPress Multiple Cross-Site Scripting Vulnerabilities (1.1.5)
-
CWE-79
High
WordPress Plugin user files Arbitrary File Upload (2.4.2)
-
CWE-434
High
WordPress Plugin Welcart e-Commerce PHP Object Injection (1.9.9)
-
CWE-915
High
WordPress Plugin Welcart e-Commerce PHP Object Injection (1.9.3)
-
CWE-915
High
WordPress Plugin Woocommerce CSV importer Arbitrary File Deletion (3.3.6)
-
CWE-73
High
WordPress Plugin WooCommerce PHP Object Injection (3.2.3)
CVE-2017-18356
CWE-915
High
WordPress Plugin WordPress Backup to Dropbox Information Disclosure (4.7.1)
-
CWE-200
High
WordPress Plugin WP Job Manager PHP Object Injection (1.29.2)
-
CWE-915
High
WordPress Plugin WP Support Plus Responsive Ticket System PHP Object Injection (9.0.3)
-
CWE-915
High
WordPress Plugin Activity Log Multiple Cross-Site Scripting Vulnerabilities (2.4.0)
CVE-2018-8729
CWE-79
High
WordPress Plugin bbPress Move Topics PHP Object Injection (1.1.4)
CVE-2018-21005
CWE-915
High
WordPress Plugin DukaPress PHP Object Injection (3.1.20)
-
CWE-915
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (1.2.32)
CVE-2018-7543
CWE-79
High
WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.1)
CVE-2018-9020
CWE-79
High
WordPress Plugin File Manager Unspecified Vulnerability (5.0.0)
-
-
High
WordPress Plugin Import any XML or CSV File to WordPress Cross-Site Scripting (3.4.6)
CVE-2018-0547
CWE-79
High
WordPress Plugin Instagram Feed Cross-Site Scripting (1.5.1)
-
CWE-79
High
WordPress Plugin IP Logger Arbitrary File Upload (3.1)
-
CWE-434
High
WordPress Plugin iThemes Security (formerly Better WP Security) Unspecified Vulnerability (6.9.0)
CVE-2018-7433
-
High
WordPress Plugin Limit Login Attempts Cross-Site Scripting (1.7.1)
CVE-2023-1912
CWE-79
High
WordPress Plugin Limit Login Attempts Reloaded Cross-Site Scripting (2.7.0)
-
CWE-79
High
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Security Bypass (3.4.4)
-
CWE-287
High
WordPress Plugin Manage and respond to conversations with leads-HappyForms PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (4.1.6)
-
CWE-79
High
WordPress Plugin Newsletters PHP Object Injection (4.6.8.5)
-
CWE-915
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability (2.2.46)
CVE-2018-7586
-
High
WordPress Plugin Simple Instagram Feed Cross-Site Scripting (1.3)
-
CWE-79
High
WordPress Plugin Site Editor-WordPress Site Builder-Theme Builder and Page Builder Local File Inclusion (1.1.1)
CVE-2018-7422
CWE-22
High
WordPress Plugin WL Katalogsok PHP Object Injection (3.5.4)
-
CWE-915
High
WordPress Plugin WooCommerce Save For Later Cart Enhancement PHP Object Injection (1.0.6)
-
CWE-915
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Multiple Vulnerabilities (1.1.9)
CVE-2018-8711
CWE-94
High
WordPress Plugin WordPress Social Share, Social Login and Social Comments-Super Socializer Security Bypass (7.10.6)
-
CWE-287
High
WordPress Plugin 10Web Social Feed for Instagram Multiple Cross-Site Scripting Vulnerabilities (1.3.0)
CVE-2018-10301
CWE-79
High
WordPress Plugin Buddypress Xprofile Custom Fields Type Arbitrary File Deletion (2.6.3)
-
CWE-73
High
WordPress Plugin Caldera Forms-More Than Contact Forms Multiple Cross-Site Scripting Vulnerabilities (1.5.9.1)
CVE-2018-7747
CWE-79
High
WordPress Plugin Contact Form DB CSV Injection (2.10.32)
CVE-2018-9035
CWE-20
High
WordPress Plugin Disc Golf Manager PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.3)
CVE-2018-0576
CWE-79
High
WordPress Plugin Google Drive for WordPress Arbitrary File Deletion (2.2)
-
CWE-73
High
WordPress Plugin Like Button Rating-LikeBtn Security Bypass (2.5.3)
-
CWE-264
High
WordPress Plugin My Calendar Cross-Site Scripting (2.5.16)
-
CWE-79
High