High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name

CVE

CWE

Severity

WordPress Plugin Server Status by Hostname/IP SQL Injection (4.6)

CVE-2019-12570

CWE-89

High

WordPress Plugin Simple Mail Address Encoder Cross-Site Scripting (1.6.1)

CVE-2019-15833

CWE-79

High

WordPress Plugin Simple Membership Cross-Site Request Forgery (3.8.4)

CVE-2019-14328

CWE-352

High

WordPress Plugin Taxonomy Converter Unspecified Vulnerability (1.1)

-

-

High

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.51)

CVE-2019-14947

CWE-79

High

WordPress Plugin Variation Swatches for WooCommerce Cross-Site Scripting (1.0.61)

CVE-2019-14774

CWE-79

High

WordPress Plugin Vertical News Scroller Cross-Site Scripting (1.9)

-

CWE-79

High

WordPress Plugin Visitor Traffic Real Time Statistics Cross-Site Request Forgery (1.12)

CVE-2019-15832

CWE-352

High

WordPress Plugin Watu Quiz Cross-Site Scripting (3.1.2.5)

-

CWE-79

High

WordPress Plugin Watu Quiz Cross-Site Scripting (3.1.2.4)

-

CWE-79

High

WordPress Plugin WC Duplicate Order Security Bypass (1.5)

-

CWE-264

High

WordPress Plugin WebLibrarian SQL Injection (3.5.4)

CVE-2019-1010034

CWE-89

High

WordPress Plugin Widget for Facebook Page Feeds Cross-Site Scripting (5.0)

-

CWE-79

High

WordPress Plugin WooCommerce Cross-Site Request Forgery (3.6.4)

-

CWE-352

High

WordPress Plugin WooCommerce Product Feed for Google, Facebook, eBay and Many More Cross-Site Scripting (3.1.14)

CVE-2019-1010124

CWE-79

High

WordPress Plugin WordPress Ultra Simple Paypal Shopping Cart Cross-Site Request Forgery (4.4)

CVE-2019-5992

CWE-352

High

WordPress Plugin WP Code Highlight.js Cross-Site Request Forgery (0.6.2)

CVE-2019-12934

CWE-352

High

WordPress Plugin WP Google Maps Cross-Site Scripting (7.11.34)

CVE-2019-14792

CWE-79

High

WordPress Plugin WP Like Button Security Bypass (1.6.0)

CVE-2019-13344

CWE-264

High

WordPress Plugin WP-Matomo (WP-Piwik) Unspecified Vulnerability (1.0.18)

-

-

High

WordPress Plugin WP Review Unspecified Vulnerability (5.2.1)

-

-

High

WordPress Plugin WP Statistics Cross-Site Scripting (12.6.7)

-

CWE-79

High

WordPress Plugin WP Statistics SQL Injection (12.6.6.1)

CVE-2019-13275

CWE-89

High

WordPress Plugin WP SVG Icons Cross-Site Request Forgery (3.2.1)

CVE-2019-14216

CWE-352

High

WordPress Plugin WPS Bidouille Multiple Vulnerabilities (1.12.2)

-

CWE-434

High

WordPress Plugin WPS Child Theme Generator Directory Traversal (1.1)

CVE-2019-15822

CWE-22

High

WordPress Plugin WPS Cleaner Multiple Cross-Site Request Forgery Vulnerabilities (1.4.4)

-

CWE-352

High

WordPress Plugin WPS Hide Login Multiple Security Bypass Vulnerabilities (1.5.2.2)

CVE-2019-15826

CWE-264

High

WordPress Plugin WPS Limit Login Multiple Vulnerabilities (1.4.5)

-

CWE-352

High

WordPress Plugin Yes-co ORES Cross-Site Scripting (1.3.44)

-

CWE-79

High

WordPress Plugin Yoast SEO Cross-Site Scripting (11.5)

CVE-2019-13478

CWE-79

High

WordPress Plugin 10Web Social Feed for Instagram Security Bypass (1.3.18)

-

CWE-264

High

WordPress Plugin Additional Variation Images for WooCommerce Cross-Site Scripting (1.1.28)

CVE-2019-15778

CWE-79

High

WordPress Plugin AnyComment Cross-Site Scripting (0.0.32)

CVE-2018-21001

CWE-79

High

WordPress Plugin Backup and Staging by WP Time Capsule PHP Object Injection (1.21.9)

-

CWE-915

High

WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler PHP Object Injection (5.7.0)

-

CWE-915

High

WordPress Plugin Bold Page Builder Security Bypass (2.3.1)

CVE-2019-15821

CWE-264

High

WordPress Plugin Booking Multiple Vulnerabilities (2.5)

-

CWE-352

High

WordPress Plugin Booking Privilege Escalation (2.4)

CVE-2019-15774

CWE-264

High

WordPress Plugin Cache-Control Unspecified Vulnerability (2.2.3)

-

-

High

WordPress Plugin cformsII HTML Injection (15.0.1)

CVE-2019-15238

CWE-79

High

WordPress Plugin CSS & JavaScript Toolbox SQL Injection (9.2)

-

CWE-89

High

WordPress Plugin Customize Feeds for Twitter Cross-Site Request Forgery (1.8.8)

-

CWE-352

High

WordPress Plugin Donations Privilege Escalation (1.3)

CVE-2019-15772

CWE-264

High

WordPress Plugin Easy Registration Forms Cross-Site Scripting (1.8.3)

-

CWE-79

High

WordPress Plugin Easy2Map Cross-Site Scripting (1.5.5)

-

CWE-79

High

WordPress Plugin Essential Grid Portfolio-Photo Gallery Security Bypass (1.1.2)

-

CWE-264

High

WordPress Plugin Event Espresso 4 Decaf-Event Registration Event Ticketing Cross-Site Request Forgery (4.9.82)

-

CWE-352

High

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder PHP Object Injection (4.02)

CVE-2019-15780

CWE-915

High

WordPress Plugin GD Rating System Unspecified Vulnerability (2.6)

-

-

High

WordPress Plugin GiveWP-Donation and Fundraising Platform SQL Injection (2.5.0)

CVE-2019-13578

CWE-89

High

WordPress Plugin GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership Arbitrary File Upload (1.4.14)

-

CWE-434

High

WordPress Plugin HandL UTM Grabber Security Bypass (2.6.4)

CVE-2019-15769

CWE-264

High

WordPress Plugin Import Export WordPress Users CSV Injection (1.3.1)

CVE-2019-15092

CWE-20

High

WordPress Plugin Import Social Events Cross-Site Scripting (1.6.6)

-

CWE-79

High

WordPress Plugin JoomSport-for Sports: Team & League, Football, Hockey & more SQL Injection (3.3)

CVE-2019-14348

CWE-89

High

WordPress Plugin JSON API Open Redirect (1.1.3)

-

CWE-601

High

WordPress Plugin Learning Courses Privilege Escalation (4.7)

CVE-2019-15775

CWE-264

High

WordPress Plugin Link Log-external link click monitor SQL Injection (2.0)

CVE-2015-9344

CWE-89

High

WordPress Plugin Listing, Classified Ads & Business Directory-uListing Arbitrary File Upload (1.2.1)

-

CWE-434

High

WordPress Plugin Login or Logout Menu Item Security Bypass (1.1.1)

CVE-2019-15820

CWE-264

High

WordPress Plugin Maintenance Cross-Site Request Forgery (3.6.4)

-

CWE-352

High

WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Security Bypass (4.16)

-

CWE-264

High

WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection (3.2.10)

CVE-2019-14314

CWE-89

High

WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups SQL Injection (3.44)

CVE-2019-14695

CWE-89

High

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Request Forgery (2.0.2)

-

CWE-352

High

WordPress Plugin Product Addons & Fields for WooCommerce Cross-Site Scripting (18.3)

CVE-2019-14948

CWE-79

High

WordPress Plugin Restaurant Reservations Privilege Escalation (1.3)

CVE-2019-15819

CWE-264

High

WordPress Plugin RSVPMaker SQL Injection (6.1.9)

CVE-2019-15646

CWE-89

High

WordPress Plugin Sell Downloads Unspecified Vulnerability (1.0.85)

-

-

High

WordPress Plugin Simple 301 Redirects-Addon-Bulk Uploader Multiple Security Bypass Vulnerabilities (1.2.4)

CVE-2019-15818

CWE-264

High

WordPress Plugin Simple Membership Security Bypass (3.8.5)

-

CWE-264

High

WordPress Plugin Social LikeBox & Feed Cross-Site Scripting (2.8.4)

CVE-2019-15781

CWE-79

High

WordPress Plugin Theme Check Cross-Site Request Forgery (20190208.1)

-

CWE-352

High

WordPress Plugin Travel Management Privilege Escalation (1.5)

CVE-2019-15773

CWE-264

High