Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13071 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin My WordPress Login Logo Multiple Unspecified Vulnerabilities (2.1)
-
-
High
WordPress Plugin Open Graph for Facebook, Google+ and Twitter Card Tags Cross-Site Scripting (2.2.4)
CVE-2018-0579
CWE-79
High
WordPress Plugin PixelYourSite-Facebook Pixel (Events, WooCommerce & Easy Digital Downloads) Cross-Site Scripting (5.2.1)
CVE-2018-0578
CWE-79
High
WordPress Plugin Rating-Widget:Star Review System Cross-Site Scripting (2.8.8)
-
CWE-79
High
WordPress Plugin Rating-Widget:Star Review System Security Bypass (2.8.9)
-
CWE-264
High
WordPress Plugin Relevanssi-A Better Search Cross-Site Scripting (4.0.4)
CVE-2018-9034
CWE-79
High
WordPress Plugin Relevanssi-A Better Search SQL Injection (3.6.0)
-
CWE-89
High
WordPress Plugin Responsive Cookie Consent Cross-Site Scripting (1.7)
CVE-2018-10309
CWE-79
High
WordPress Plugin Simple Fields Local File Inclusion (0.3.5)
-
CWE-22
High
WordPress Plugin Synchi Arbitrary File Deletion (5.1)
-
CWE-73
High
WordPress Plugin UK Cookie Consent Cross-Site Scripting (2.3.9)
CVE-2018-10310
CWE-79
High
WordPress Plugin VRView Cross-Site Scripting (1.1.3)
-
CWE-79
High
WordPress Plugin Woo Import Export Arbitrary File Deletion (1.0)
-
CWE-73
High
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.2)
CVE-2018-9172
CWE-79
High
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.3)
CVE-2018-9844
CWE-79
High
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Scripting (4.0.3)
CVE-2018-0577
CWE-79
High
WordPress Plugin WP Activity Log Information Disclosure (3.1.1)
CVE-2018-8719
CWE-200
High
WordPress Plugin WP Background Takeover Directory Traversal (4.1.4)
CVE-2018-9118
CWE-22
High
WordPress Plugin WP Image Zoom Denial of Service (1.23)
-
CWE-400
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (8.0.05)
CVE-2018-9864
CWE-79
High
WordPress Plugin WP-VR-view-Add Photo Sphere, 360 video to WordPress Cross-Site Scripting (1.6)
-
CWE-79
High
WordPress Plugin WP with Spritz Local/Remote File Inclusion (1.0)
-
CWE-98
High
WordPress Plugin CF7 Invisible reCAPTCHA Cross-Site Scripting (1.3.1)
CVE-2018-21012
CWE-79
High
WordPress Plugin Custom css-js-php Unspecified Vulnerability (2.0.2)
-
-
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (3.4.12)
-
CWE-79
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder CSV Injection (1.12.22)
CVE-2018-10504
CWE-20
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Multiple Vulnerabilities (1.12.25)
-
CWE-89
High
WordPress Plugin GD bbPress Attachments Cross-Site Scripting (2.5)
-
CWE-79
High
WordPress Plugin Google Drive for WordPress Information Disclosure (2.2)
-
CWE-538
High
WordPress Plugin Loginizer Cross-Site Scripting (1.3.9)
CVE-2018-11366
CWE-79
High
WordPress Plugin Mass Pages/Posts Creator Cross-Site Scripting (1.2.2)
CVE-2018-11580
CWE-79
High
WordPress Plugin Metronet Tag Manager Cross-Site Request Forgery (1.2.7)
-
CWE-352
High
WordPress Plugin Page and Post Clone Information Disclosure (1.1)
-
CWE-200
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Arbitrary File Upload (2.7.4)
-
CWE-434
High
WordPress Plugin Peugeot Music Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Remote Code Execution (2.8.5)
CVE-2019-15873
CWE-94
High
WordPress Plugin Simple Contact Info Arbitrary File Deletion (1.1.9)
-
CWE-73
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Request Forgery (2.0.6)
CVE-2018-10233
CWE-352
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.10)
CVE-2018-10234
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Vulnerabilities (1.3.88)
CVE-2018-0590
CWE-434
High
WordPress Plugin WF Cookie Consent Cross-Site Scripting (1.1.3)
CVE-2018-10371
CWE-79
High
WordPress Plugin Woocommerce Category Banner Management Security Bypass (1.1.1)
CVE-2018-11579
CWE-264
High
WordPress Plugin WooCommerce Checkout For Digital Goods Cross-Site Request Forgery (2.2)
-
CWE-352
High
WordPress Plugin WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Multiple Vulnerabilities (1.8)
-
CWE-352
High
WordPress Plugin WooCommerce Product Attachment Cross-Site Scripting (1.1.2)
-
CWE-79
High
WordPress Plugin WooCommerce Quick Reports Cross-Site Scripting (1.0.6)
-
CWE-79
High
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Scripting (4.0.4)
-
CWE-79
High
WordPress Plugin WordPress Survey & Poll-Quiz, Survey and Poll PHP Object Injection (1.5.5)
-
CWE-915
High
WordPress Plugin WP Booking Calendar Multiple Vulnerabilities (3.0.0)
-
CWE-89
High
WordPress Plugin WP Booking Cross-Site Scripting (1.4)
-
CWE-79
High
WordPress Plugin WP Docs Multiple Vulnerabilities (1.1.7)
-
CWE-915
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (8.0.07)
CVE-2018-11105
CWE-79
High
WordPress Plugin WP Pipes Unspecified Vulnerability (1.28)
-
-
High
WordPress Plugin WP ULike Cross-Site Scripting (3.1)
-
CWE-79
High
WordPress Plugin WP ULike Multiple Vulnerabilities (3.1)
-
CWE-352
High
WordPress Plugin WP User Groups Cross-Site Request Forgery (2.0.0)
-
CWE-352
High
WordPress Plugin wpForo Forum SQL Injection (1.4.9)
CVE-2018-11515
CWE-89
High
WordPress Plugin Add Social Share Messenger Buttons Whatsapp and Viber Cross-Site Request Forgery (1.0.8)
-
CWE-352
High
WordPress Plugin Advance Search for WooCommerce Cross-Site Scripting (1.0.9)
-
CWE-79
High
WordPress Plugin Advanced Order Export For WooCommerce CSV Injection (1.5.4)
CVE-2018-11525
CWE-20
High
WordPress Plugin ChimpMate-WordPress MailChimp Assistant Local File Inclusion (1.3.2)
-
CWE-22
High
WordPress Plugin Contact Form by WD-responsive drag & drop contact form builder tool Multiple Vulnerabilities (1.12.20)
-
CWE-89
High
WordPress Plugin Contact Form by WD-responsive drag & drop contact form builder tool Unspecified Vulnerability (1.12.22)
-
-
High
WordPress Plugin Contact Form for WordPress-Ultimate Form Builder Lite Multiple Vulnerabilities (1.3.7)
-
CWE-89
High
WordPress Plugin Eu Cookie Notice Cross-Site Request Forgery (1.0.6)
-
CWE-352
High
WordPress Plugin FireDrum Email Marketing PHP Object Injection (1.47)
-
CWE-915
High
WordPress Plugin iThemes Security (formerly Better WP Security) SQL Injection (7.0.2)
CVE-2018-12636
CWE-89
High
WordPress Plugin Page Visit Counter SQL Injection (4.0.9)
-
CWE-89
High
WordPress Plugin Quttera Web Malware Scanner Security Bypass (3.0.8.65)
-
CWE-264
High
WordPress Plugin Redirection Local File Inclusion (2.7.3)
-
CWE-22
High
WordPress Plugin Redirection PHP Object Injection (2.7.3)
-
CWE-915
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction SQL Injection (3.0.9)
CVE-2018-10969
CWE-89
High
WordPress Plugin Site Reviews Cross-Site Scripting (2.15.2)
CVE-2018-0603
CWE-79
High
WordPress Plugin Tooltipy (tooltips for WP) Multiple Vulnerabilities (5.0.2)
-
CWE-352
High
WordPress Plugin WordPress Comments Import & Export CSV Injection (2.0.4)
CVE-2018-11526
CWE-20
High