Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13355 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin cformsII Multiple Cross-Site Scripting Vulnerabilities (14.13.2)
-
CWE-79
High
WordPress Plugin Church Admin Arbitrary File Upload (1.2530)
-
CWE-434
High
WordPress Plugin Convert Docx2post Arbitrary File Upload (1.4)
-
CWE-434
High
WordPress Plugin Custom Permalinks SQL Injection (1.1)
-
CWE-89
High
WordPress Plugin Doctor Appointment Booking Multiple Vulnerabilities (1.0.0)
-
CWE-89
High
WordPress Plugin Flexible Captcha Multiple Vulnerabilities (3.3)
-
CWE-434
High
WordPress Plugin flickrRSS Multiple Vulnerabilities (5.3.1)
CVE-2018-6469
CWE-352
High
WordPress Plugin Help Desk & Knowledgebase Software PHP Object Injection (1.3.11)
-
CWE-915
High
WordPress Plugin Injectbody Spam Injection (All)
-
CWE-610
High
WordPress Plugin Injectscr Spam Injection (All)
-
CWE-610
High
WordPress Plugin Lightbox Multiple Unspecified Vulnerabilities (2.0.7)
-
-
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.2.13)
CVE-2018-7280
CWE-79
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Unspecified Vulnerability (1.3.66)
-
-
High
WordPress Plugin Portfolio Gallery-Photo Gallery Unspecified Vulnerability (2.3.0)
-
-
High
WordPress Plugin PWAMP PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin SG Optimizer Multiple Vulnerabilities (3.3.5)
-
CWE-352
High
WordPress Plugin Share Buttons Cross-Site Scripting (1.3.1)
-
CWE-79
High
WordPress Plugin Spider FAQ Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin tPlayer-Audio Player for WordPress Multiple Cross-Site Scripting Vulnerabilities (1.1.5)
-
CWE-79
High
WordPress Plugin user files Arbitrary File Upload (2.4.2)
-
CWE-434
High
WordPress Plugin Welcart e-Commerce PHP Object Injection (1.9.9)
-
CWE-915
High
WordPress Plugin Welcart e-Commerce PHP Object Injection (1.9.3)
-
CWE-915
High
WordPress Plugin Woocommerce CSV importer Arbitrary File Deletion (3.3.6)
-
CWE-73
High
WordPress Plugin WooCommerce PHP Object Injection (3.2.3)
CVE-2017-18356
CWE-915
High
WordPress Plugin WordPress Backup to Dropbox Information Disclosure (4.7.1)
-
CWE-200
High
WordPress Plugin WP Job Manager PHP Object Injection (1.29.2)
-
CWE-915
High
WordPress Plugin WP Support Plus Responsive Ticket System PHP Object Injection (9.0.3)
-
CWE-915
High
WordPress Plugin Activity Log Multiple Cross-Site Scripting Vulnerabilities (2.4.0)
CVE-2018-8729
CWE-79
High
WordPress Plugin bbPress Move Topics PHP Object Injection (1.1.4)
CVE-2018-21005
CWE-915
High
WordPress Plugin DukaPress PHP Object Injection (3.1.20)
-
CWE-915
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (1.2.32)
CVE-2018-7543
CWE-79
High
WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.1)
CVE-2018-9020
CWE-79
High
WordPress Plugin File Manager Unspecified Vulnerability (5.0.0)
-
-
High
WordPress Plugin Import any XML or CSV File to WordPress Cross-Site Scripting (3.4.6)
CVE-2018-0547
CWE-79
High
WordPress Plugin Instagram Feed Cross-Site Scripting (1.5.1)
-
CWE-79
High
WordPress Plugin IP Logger Arbitrary File Upload (3.1)
-
CWE-434
High
WordPress Plugin iThemes Security (formerly Better WP Security) Unspecified Vulnerability (6.9.0)
CVE-2018-7433
-
High
WordPress Plugin Limit Login Attempts Cross-Site Scripting (1.7.1)
CVE-2023-1912
CWE-79
High
WordPress Plugin Limit Login Attempts Reloaded Cross-Site Scripting (2.7.0)
-
CWE-79
High
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Security Bypass (3.4.4)
-
CWE-287
High
WordPress Plugin Manage and respond to conversations with leads-HappyForms PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (4.1.6)
-
CWE-79
High
WordPress Plugin Newsletters PHP Object Injection (4.6.8.5)
-
CWE-915
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability (2.2.46)
CVE-2018-7586
-
High
WordPress Plugin Simple Instagram Feed Cross-Site Scripting (1.3)
-
CWE-79
High
WordPress Plugin Site Editor-WordPress Site Builder-Theme Builder and Page Builder Local File Inclusion (1.1.1)
CVE-2018-7422
CWE-22
High
WordPress Plugin WL Katalogsok PHP Object Injection (3.5.4)
-
CWE-915
High
WordPress Plugin WooCommerce Save For Later Cart Enhancement PHP Object Injection (1.0.6)
-
CWE-915
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Multiple Vulnerabilities (1.1.9)
CVE-2018-8711
CWE-94
High
WordPress Plugin WordPress Social Share, Social Login and Social Comments-Super Socializer Security Bypass (7.10.6)
-
CWE-287
High
WordPress Plugin 10Web Social Feed for Instagram Multiple Cross-Site Scripting Vulnerabilities (1.3.0)
CVE-2018-10301
CWE-79
High
WordPress Plugin Buddypress Xprofile Custom Fields Type Arbitrary File Deletion (2.6.3)
-
CWE-73
High
WordPress Plugin Caldera Forms-More Than Contact Forms Multiple Cross-Site Scripting Vulnerabilities (1.5.9.1)
CVE-2018-7747
CWE-79
High
WordPress Plugin Contact Form DB CSV Injection (2.10.32)
CVE-2018-9035
CWE-20
High
WordPress Plugin Disc Golf Manager PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.3)
CVE-2018-0576
CWE-79
High
WordPress Plugin Google Drive for WordPress Arbitrary File Deletion (2.2)
-
CWE-73
High
WordPress Plugin Like Button Rating-LikeBtn Security Bypass (2.5.3)
-
CWE-264
High
WordPress Plugin My Calendar Cross-Site Scripting (2.5.16)
-
CWE-79
High
WordPress Plugin My WordPress Login Logo Multiple Unspecified Vulnerabilities (2.1)
-
-
High
WordPress Plugin Open Graph for Facebook, Google+ and Twitter Card Tags Cross-Site Scripting (2.2.4)
CVE-2018-0579
CWE-79
High
WordPress Plugin PixelYourSite-Facebook Pixel (Events, WooCommerce & Easy Digital Downloads) Cross-Site Scripting (5.2.1)
CVE-2018-0578
CWE-79
High
WordPress Plugin Rating-Widget:Star Review System Cross-Site Scripting (2.8.8)
-
CWE-79
High
WordPress Plugin Rating-Widget:Star Review System Security Bypass (2.8.9)
-
CWE-264
High
WordPress Plugin Relevanssi-A Better Search Cross-Site Scripting (4.0.4)
CVE-2018-9034
CWE-79
High
WordPress Plugin Relevanssi-A Better Search SQL Injection (3.6.0)
-
CWE-89
High
WordPress Plugin Responsive Cookie Consent Cross-Site Scripting (1.7)
CVE-2018-10309
CWE-79
High
WordPress Plugin Simple Fields Local File Inclusion (0.3.5)
-
CWE-22
High
WordPress Plugin Synchi Arbitrary File Deletion (5.1)
-
CWE-73
High
WordPress Plugin UK Cookie Consent Cross-Site Scripting (2.3.9)
CVE-2018-10310
CWE-79
High
WordPress Plugin VRView Cross-Site Scripting (1.1.3)
-
CWE-79
High
WordPress Plugin Woo Import Export Arbitrary File Deletion (1.0)
-
CWE-73
High
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.2)
CVE-2018-9172
CWE-79
High
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.3)
CVE-2018-9844
CWE-79
High
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Scripting (4.0.3)
CVE-2018-0577
CWE-79
High