Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, Aweber-MailOptin Cross-Site Request Forgery (1.2.19.1)
-
CWE-352
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Information Disclosure (1.8.11)
CVE-2019-17574
CWE-200
High
WordPress Plugin Premium Addons for Elementor Cross-Site Scripting (3.7.2)
-
CWE-79
High
WordPress Plugin Premium Blocks for Gutenberg Unspecified Vulnerability (1.7.4)
-
-
High
WordPress Plugin Prevent files/folders access Cross-Site Request Forgery (1.1.1)
-
CWE-352
High
WordPress Plugin Product Subtitle For WooCommerce Arbitrary File Disclosure (4.1)
-
CWE-538
High
WordPress Plugin PushEngage Web Push Notifications Cross-Site Scripting (1.5.8)
-
CWE-79
High
WordPress Plugin Qode Instagram Widget (embeded in Bridge-Creative Multi-Purpose WordPress Theme) Open Redirect (2.0.1)
-
CWE-601
High
WordPress Plugin Qode Twitter Feed (embeded in Bridge-Creative Multi-Purpose WordPress Theme) Open Redirect (2.0.1)
-
CWE-601
High
WordPress Plugin Quick Buy For Woocommerce Arbitrary File Disclosure (2.0)
-
CWE-538
High
WordPress Plugin Request a Quote Cross-Site Scripting (2.0.0)
-
CWE-79
High
WordPress Plugin Rich Reviews Cross-Site Scripting (1.7.4)
-
CWE-79
High
WordPress Plugin Shield Security-Smart Bot Blocking & Intrusion Prevention Security Cross-Site Scripting (8.2.2)
-
CWE-79
High
WordPress Plugin Simple Fields Cross-Site Scripting (1.4.11)
-
CWE-79
High
WordPress Plugin SKU Shortlink For WooCommerce Arbitrary File Disclosure (1.3.4)
-
CWE-538
High
WordPress Plugin Sliced Invoices-WordPress Invoice Multiple Vulnerabilities (3.8.2)
-
CWE-200
High
WordPress Plugin Social Metrics Tracker Cross-Site Scripting (1.6.8)
-
CWE-79
High
WordPress Plugin SoundPress Cross-Site Scripting (2.2.6)
-
CWE-79
High
WordPress Plugin Staff Directory-Employee Directory for WordPress Unspecified Vulnerability (3.6.1)
-
-
High
WordPress Plugin Starter Templates-Elementor, WordPress & Beaver Builder Templates Cross-Site Scripting (1.3.20)
-
CWE-79
High
WordPress Plugin Swift Landing Page Cross-Site Request Forgery (1.1)
-
CWE-352
High
WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.5.0)
-
CWE-79
High
WordPress Plugin Theme Editor Multiple Vulnerabilities (2.1)
-
CWE-434
High
WordPress Plugin TRADIES Information Disclosure (2.2.6)
-
CWE-200
High
WordPress Plugin Travelpayouts:All Travel Brands in One Place Cross-Site Scripting (0.7.12)
-
CWE-79
High
WordPress Plugin Ultimate FAQ Security Bypass (1.8.24)
CVE-2019-17233
CWE-264
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Multiple Vulnerabilities (3.3.0)
CVE-2019-16932
CWE-918
High
WordPress Plugin Web to Print Online Designer Security Bypass (2.3.0)
-
CWE-264
High
WordPress Plugin WooCommerce Open Redirect (3.7.0)
-
CWE-601
High
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Cross-Site Scripting (2.2.7)
CVE-2019-16289
CWE-79
High
WordPress Plugin Word of the day Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin WordPress Email Template Designer-WP HTML Mail HTML Injection (2.9.0.3)
-
CWE-79
High
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Request Forgery (4.0.9)
-
CWE-352
High
WordPress Plugin WordPress Framework Possible Backdoor (1.0)
-
CWE-95
High
WordPress Plugin WP Email Template HTML Injection (2.2.10)
-
CWE-79
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Request Forgery (8.0.37)
-
CWE-352
High
WordPress Plugin WP Security Safe Cross-Site Request Forgery (2.2.2)
-
CWE-352
High
WordPress Plugin WP Telegram (Auto Post and Notifications) Unspecified Vulnerability (2.1.8)
-
-
High
WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts Multiple Vulnerabilities (2.0.11)
CVE-2019-6012
CWE-89
High
WordPress Plugin WPeMatico RSS Feed Fetcher Cross-Site Scripting (2.3.7)
-
CWE-79
High
WordPress Plugin YouTube Gallery-Best YouTube Video Gallery Cross-Site Scripting (3.2.1)
-
CWE-79
High
WordPress Plugin Zedna Contact form Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Zedna Contact form Directory Traversal (1.1)
-
CWE-22
High
WordPress Plugin Zoho CRM Lead Magnet Cross-Site Scripting (1.6.9.1)
CVE-2019-19306
CWE-79
High
WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler Cross-Site Scripting (5.8.1)
CVE-2019-17550
CWE-79
High
WordPress Plugin Currency Switcher for WooCommerce Security Bypass (2.11.1)
CVE-2019-18668
CWE-264
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Multiple Vulnerabilities (4.2.2)
CVE-2019-19985
CWE-352
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (4.3.0)
CVE-2019-20361
CWE-89
High
WordPress Plugin Funnel Builder by CartFlows-Create High Converting Sales Funnels For WordPress Privilege Escalation (1.3.0)
-
CWE-264
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Security Bypass (2.5.9)
-
CWE-264
High
WordPress Plugin If>So Dynamic Content Unspecified Vulnerability (1.4.1)
-
-
High
WordPress Plugin IgniteUp-Coming Soon and Maintenance Mode Multiple Vulnerabilities (3.4)
CVE-2019-17237
CWE-352
High
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (7.9)
-
CWE-79
High
WordPress Plugin MailPoet Newsletters (Previous) Security Bypass (2.8.1)
CVE-2018-20853
CWE-264
High
WordPress Plugin MegaOptim Image Optimizer Unspecified Vulnerability (1.3.2)
-
-
High
WordPress Plugin MobiLoud-WordPress Mobile Apps-Convert your WordPress Website to Native Mobile Apps Remote Code Execution (4.0.1)
-
CWE-94
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Privilege Escalation (3.2.2)
-
CWE-264
High
WordPress Plugin Pluginception Multiple Cross-Site Scripting Vulnerabilities (1.2)
-
CWE-79
High
WordPress Plugin Safe SVG Cross-Site Scripting (1.9.5)
-
CWE-79
High
WordPress Plugin Safe SVG Denial of Service (1.9.4)
CVE-2019-18855
CWE-400
High
WordPress Plugin Slack-Chat Information Disclosure (1.5.5)
CVE-2019-14367
CWE-200
High
WordPress Plugin Snazzy Maps Cross-Site Request Forgery (1.1.5)
-
CWE-352
High
WordPress Plugin Social Photo Gallery Remote Code Execution (1.0)
CVE-2019-14467
CWE-94
High
WordPress Plugin Social Sharing-Sassy Social Share Cross-Site Scripting (3.3.3)
-
CWE-79
High
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk Cross-Site Scripting (5.127.3)
CVE-2019-17515
CWE-79
High
WordPress Plugin Tidio Live Chat Cross-Site Request Forgery (4.1.0)
-
CWE-352
High
WordPress Plugin WordPress Backup and Migrate-Backup Guard Cross-Site Request Forgery (1.1.90)
-
CWE-352
High
WordPress Plugin WordPress Photo Gallery by Gallery Bank Unspecified Vulnerability (4.0.48)
-
-
High
WordPress Plugin WP Easy Columns Cross-Site Scripting (2.1.3)
-
CWE-79
High
WordPress Plugin WP Intercom-Slack for WordPress Information Disclosure (1.2.1)
CVE-2019-14365
CWE-200
High
WordPress Plugin WP Maintenance Cross-Site Request Forgery (5.0.5)
CVE-2019-19979
CWE-352
High
WordPress Plugin WP Maintenance Mode Cross-Site Scripting (2.2.3)
-
CWE-79
High
WordPress Plugin WP SlackSync Information Disclosure (1.8.5)
CVE-2019-14366
CWE-200
High
WordPress Plugin YITH Advanced Refund System for WooCommerce Security Bypass (1.0.10)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH Color and Label Variations for WooCommerce Security Bypass (1.8.11)
CVE-2019-16251
CWE-264
High