High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name

CVE

CWE

Severity

WordPress Plugin WooCommerce Checkout Manager Arbitrary File Upload (4.2.6)

-

CWE-434

High

WordPress Plugin WooCommerce PayPal Checkout Payment Gateway Parameter Tampering (1.6.8)

CVE-2019-7441

CWE-472

High

WordPress Plugin WordPress Download Manager Cross-Site Scripting (2.9.93)

CVE-2019-15889

CWE-79

High

WordPress Plugin WordPress Gallery MaxGalleria Unspecified Vulnerability (6.0.8)

-

-

High

WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Cross-Site Request Forgery (7.1.6)

-

CWE-352

High

WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Unspecified Vulnerability (7.2)

-

-

High

WordPress Plugin Social Sharing-Social Warfare Cross-Site Scripting (3.5.3)

-

CWE-79

High

WordPress Plugin WP Database Backup Cross-Site Request Forgery (5.1.2)

-

CWE-352

High

WordPress Plugin WP Google Maps Cross-Site Request Forgery (7.11.27)

-

CWE-352

High

WordPress Plugin WP Google Maps SQL Injection (7.11.17)

CVE-2019-10692

CWE-89

High

WordPress Plugin WP Human Resource Management Security Bypass (2.2.5)

CVE-2019-9574

CWE-264

High

WordPress Plugin WP Inventory Manager Cross-Site Scripting (1.7.8)

-

CWE-79

High

WordPress Plugin Zielke Specialized Catalog Arbitrary File Upload (3.0.7)

-

CWE-434

High

WordPress Plugin Advanced Woo Search Unspecified Vulnerability (1.69)

-

-

High

WordPress Plugin Affiliates Manager Cross-Site Request Forgery (2.6.5)

CVE-2019-15868

CWE-352

High

WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.5.38)

-

CWE-79

High

WordPress Plugin Analytics Cross-Site Scripting (1.2.3)

-

CWE-79

High

WordPress Plugin Battle Suit for Divi Security Bypass (1.10.1)

-

CWE-264

High

WordPress Plugin Blog Designer Cross-Site Scripting (1.8.11)

-

CWE-79

High

WordPress Plugin Carts Guru PHP Object Injection (1.4.5)

CVE-2019-12241

CWE-915

High

WordPress Plugin CF7 Manual Spam Blocker Privilege Escalation (1.0)

-

CWE-264

High

WordPress Plugin CheetahO Image Compression and Optimizer Unspecified Vulnerability (1.4.2.1)

-

-

High

WordPress Plugin Convert Plus Security Bypass (3.4.2)

-

CWE-264

High

WordPress Plugin Custom CSS Pro Cross-Site Request Forgery (1.0.3)

CVE-2019-5984

CWE-352

High

WordPress Plugin Custom Field Suite Cross-Site Request Forgery (2.5.15)

-

CWE-352

High

WordPress Plugin Custom Field Suite Cross-Site Scripting (2.5.14)

CVE-2019-11871

CWE-79

High

WordPress Plugin Event Management Tickets Booking By Event Monster Cross-Site Scripting (1.0.7)

-

CWE-79

High

WordPress Plugin Floating Chat Widget:Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button-Chaty Unspecified Vulnerability (2.0.5)

-

-

High

WordPress Plugin Folders-Organize Pages, Posts and Media Library Folders with Drag and Drop Cross-Site Scripting (2.0.5)

-

CWE-79

High

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder SQL Injection (1.13.3)

CVE-2019-10866

CWE-89

High

WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.3.13.727)

CVE-2019-14799

CWE-79

High

WordPress Plugin FV Flowplayer Video Player Multiple Vulnerabilities (7.3.14.727)

CVE-2019-14801

CWE-200

High

WordPress Plugin Gallery PhotoBlocks Unspecified Vulnerability (1.1.32)

-

-

High

WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.4.6)

CVE-2019-15317

CWE-79

High

WordPress Plugin hashtagger Unspecified Vulnerability (6)

-

-

High

WordPress Plugin Hostel Cross-Site Scripting (1.1.3)

CVE-2019-12345

CWE-79

High

WordPress Plugin Hustle-Pop-Ups, Slide-ins and Email Opt-ins CSV Injection (6.0.7)

CVE-2019-11872

CWE-20

High

WordPress Plugin Justified Gallery Unspecified Vulnerability (1.4.1)

-

-

High

WordPress Plugin Kanzu Support Desk-WordPress Helpdesk Remote Code Execution (2.4.6)

-

CWE-94

High

WordPress Plugin LittleBot ACH for Stripe + Plaid Unspecified Vulnerability (1.2.6)

-

-

High

WordPress Plugin Live Chat with Facebook Messenger Cross-Site Scripting (1.4.4)

-

CWE-79

High

WordPress Plugin Master Popups Remote Code Execution (1.0.0)

-

CWE-94

High

WordPress Plugin Mobile blocks Security Bypass (1.0)

-

CWE-264

High

WordPress Plugin Mobile Booster Security Bypass (1.0)

-

CWE-264

High

WordPress Plugin My Calendar Cross-Site Scripting (3.1.9)

CVE-2019-15713

CWE-79

High

WordPress Plugin Ninja Forms with File Uploads Extension Multiple Vulnerabilities (3.0.22)

CVE-2019-10869

CWE-434

High

WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Cross-Site Scripting (2.8.2)

-

CWE-79

High

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Open Redirect (2.0.5)

-

CWE-601

High

WordPress Plugin Passster Age Gate Security Bypass (4.0.6)

-

CWE-264

High

WordPress Plugin Pctags-Pinterest conversion tags for Pinterest Ads (advertising) + Event tracking + Site verification + WooCommerce Security Bypass (1.0.1)

-

CWE-264

High

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.22)

CVE-2019-14797

CWE-79

High

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Local File Inclusion (1.5.24)

CVE-2019-14798

CWE-22

High

WordPress Plugin PHP Everywhere Security Bypass (1.3)

-

CWE-264

High

WordPress Plugin Pinblocks-Gutenberg blocks with Pinterest widgets Unspecified Vulnerability (1.0.1)

-

-

High

WordPress Plugin PollDeep Arbitrary File Upload (1.2)

-

CWE-434

High

WordPress Plugin Print My Blog-Print, PDF, & eBook Converter Server-Side Request Forgery (1.6.5)

CVE-2019-11565

CWE-918

High

WordPress Plugin Register IPs Unspecified Vulnerability (1.8.0)

-

-

High

WordPress Plugin Related YouTube Videos Cross-Site Request Forgery (1.9.8)

CVE-2019-5980

CWE-352

High

WordPress Plugin RSVPMaker SQL Injection (5.6.3)

CVE-2018-21004

CWE-89

High

WordPress Plugin SAML SP Single Sign On-SSO login Cross-Site Scripting (4.8.72)

CVE-2019-12346

CWE-79

High

WordPress Plugin SAML SP Single Sign On-SSO login Unspecified Vulnerability (4.8.70)

-

-

High

WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Unspecified Vulnerability (2.1.8)

-

-

High

WordPress Plugin Simple Feature Requests Free Unspecified Vulnerability (1.0.4)

-

-

High

WordPress Plugin Simple File List Multiple Vulnerabilities (3.2.4)

-

CWE-538

High

WordPress Plugin Slick Popup:Contact Form 7 Popup Privilege Escalation (1.7.1)

CVE-2019-15867

CWE-264

High

WordPress Plugin Slimstat Analytics Cross-Site Request Forgery (4.8.3)

-

CWE-352

High

WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.8)

CVE-2019-15112

CWE-79

High

WordPress Plugin smart Archive Page Remove Unspecified Vulnerability (3)

-

-

High

WordPress Plugin Sticky Menu on Scroll, Sticky Header, Sticky Welcome Bar for Any Theme-myStickymenu Unspecified Vulnerability (2.1.4)

-

-

High

WordPress Plugin Toggle The Title Cross-Site Scripting (1.4)

CVE-2019-14795

CWE-79

High

WordPress Plugin Ultimate FAQ Cross-Site Scripting (1.8.21)

CVE-2019-15643

CWE-79

High

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Vulnerabilities (2.0.45)

-

CWE-538

High

WordPress Plugin User Submitted Posts Arbitrary File Upload (20190426)

-

CWE-434

High

WordPress Plugin Virim PHP Object Injection (0.4)

CVE-2019-12240

CWE-915

High

WordPress Plugin Visual CSS Style Editor Cross-Site Request Forgery (7.2.0)

-

CWE-352

High