Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13196 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Cross-Site Request Forgery (7.1.6)
-
CWE-352
High
WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Unspecified Vulnerability (7.2)
-
-
High
WordPress Plugin Social Sharing-Social Warfare Cross-Site Scripting (3.5.3)
-
CWE-79
High
WordPress Plugin WP Database Backup Cross-Site Request Forgery (5.1.2)
-
CWE-352
High
WordPress Plugin WP Google Maps Cross-Site Request Forgery (7.11.27)
-
CWE-352
High
WordPress Plugin WP Google Maps SQL Injection (7.11.17)
CVE-2019-10692
CWE-89
High
WordPress Plugin WP Human Resource Management Security Bypass (2.2.5)
CVE-2019-9574
CWE-264
High
WordPress Plugin WP Inventory Manager Cross-Site Scripting (1.7.8)
-
CWE-79
High
WordPress Plugin Zielke Specialized Catalog Arbitrary File Upload (3.0.7)
-
CWE-434
High
WordPress Plugin Advanced Woo Search Unspecified Vulnerability (1.69)
-
-
High
WordPress Plugin Affiliates Manager Cross-Site Request Forgery (2.6.5)
CVE-2019-15868
CWE-352
High
WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.5.38)
-
CWE-79
High
WordPress Plugin Analytics Cross-Site Scripting (1.2.3)
-
CWE-79
High
WordPress Plugin Battle Suit for Divi Security Bypass (1.10.1)
-
CWE-264
High
WordPress Plugin Blog Designer Cross-Site Scripting (1.8.11)
-
CWE-79
High
WordPress Plugin Carts Guru PHP Object Injection (1.4.5)
CVE-2019-12241
CWE-915
High
WordPress Plugin CF7 Manual Spam Blocker Privilege Escalation (1.0)
-
CWE-264
High
WordPress Plugin CheetahO Image Compression and Optimizer Unspecified Vulnerability (1.4.2.1)
-
-
High
WordPress Plugin Convert Plus Security Bypass (3.4.2)
-
CWE-264
High
WordPress Plugin Custom CSS Pro Cross-Site Request Forgery (1.0.3)
CVE-2019-5984
CWE-352
High
WordPress Plugin Custom Field Suite Cross-Site Request Forgery (2.5.15)
-
CWE-352
High
WordPress Plugin Custom Field Suite Cross-Site Scripting (2.5.14)
CVE-2019-11871
CWE-79
High
WordPress Plugin Event Management Tickets Booking By Event Monster Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin Floating Chat Widget:Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button-Chaty Unspecified Vulnerability (2.0.5)
-
-
High
WordPress Plugin Folders-Organize Pages, Posts and Media Library Folders with Drag and Drop Cross-Site Scripting (2.0.5)
-
CWE-79
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder SQL Injection (1.13.3)
CVE-2019-10866
CWE-89
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.3.13.727)
CVE-2019-14799
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Multiple Vulnerabilities (7.3.14.727)
CVE-2019-14801
CWE-200
High
WordPress Plugin Gallery PhotoBlocks Unspecified Vulnerability (1.1.32)
-
-
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.4.6)
CVE-2019-15317
CWE-79
High
WordPress Plugin hashtagger Unspecified Vulnerability (6)
-
-
High
WordPress Plugin Hostel Cross-Site Scripting (1.1.3)
CVE-2019-12345
CWE-79
High
WordPress Plugin Hustle-Pop-Ups, Slide-ins and Email Opt-ins CSV Injection (6.0.7)
CVE-2019-11872
CWE-20
High
WordPress Plugin Justified Gallery Unspecified Vulnerability (1.4.1)
-
-
High
WordPress Plugin Kanzu Support Desk-WordPress Helpdesk Remote Code Execution (2.4.6)
-
CWE-94
High
WordPress Plugin LittleBot ACH for Stripe + Plaid Unspecified Vulnerability (1.2.6)
-
-
High
WordPress Plugin Live Chat with Facebook Messenger Cross-Site Scripting (1.4.4)
-
CWE-79
High
WordPress Plugin Master Popups Remote Code Execution (1.0.0)
-
CWE-94
High
WordPress Plugin Mobile blocks Security Bypass (1.0)
-
CWE-264
High
WordPress Plugin Mobile Booster Security Bypass (1.0)
-
CWE-264
High
WordPress Plugin My Calendar Cross-Site Scripting (3.1.9)
CVE-2019-15713
CWE-79
High
WordPress Plugin Ninja Forms with File Uploads Extension Multiple Vulnerabilities (3.0.22)
CVE-2019-10869
CWE-434
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Cross-Site Scripting (2.8.2)
-
CWE-79
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Open Redirect (2.0.5)
-
CWE-601
High
WordPress Plugin Passster Age Gate Security Bypass (4.0.6)
-
CWE-264
High
WordPress Plugin Pctags-Pinterest conversion tags for Pinterest Ads (advertising) + Event tracking + Site verification + WooCommerce Security Bypass (1.0.1)
-
CWE-264
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.22)
CVE-2019-14797
CWE-79
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Local File Inclusion (1.5.24)
CVE-2019-14798
CWE-22
High
WordPress Plugin PHP Everywhere Security Bypass (1.3)
-
CWE-264
High
WordPress Plugin Pinblocks-Gutenberg blocks with Pinterest widgets Unspecified Vulnerability (1.0.1)
-
-
High
WordPress Plugin PollDeep Arbitrary File Upload (1.2)
-
CWE-434
High
WordPress Plugin Print My Blog-Print, PDF, & eBook Converter Server-Side Request Forgery (1.6.5)
CVE-2019-11565
CWE-918
High
WordPress Plugin Register IPs Unspecified Vulnerability (1.8.0)
-
-
High
WordPress Plugin Related YouTube Videos Cross-Site Request Forgery (1.9.8)
CVE-2019-5980
CWE-352
High
WordPress Plugin RSVPMaker SQL Injection (5.6.3)
CVE-2018-21004
CWE-89
High
WordPress Plugin SAML SP Single Sign On-SSO login Cross-Site Scripting (4.8.72)
CVE-2019-12346
CWE-79
High
WordPress Plugin SAML SP Single Sign On-SSO login Unspecified Vulnerability (4.8.70)
-
-
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Unspecified Vulnerability (2.1.8)
-
-
High
WordPress Plugin Simple Feature Requests Free Unspecified Vulnerability (1.0.4)
-
-
High
WordPress Plugin Simple File List Multiple Vulnerabilities (3.2.4)
-
CWE-538
High
WordPress Plugin Slick Popup:Contact Form 7 Popup Privilege Escalation (1.7.1)
CVE-2019-15867
CWE-264
High
WordPress Plugin Slimstat Analytics Cross-Site Request Forgery (4.8.3)
-
CWE-352
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.8)
CVE-2019-15112
CWE-79
High
WordPress Plugin smart Archive Page Remove Unspecified Vulnerability (3)
-
-
High
WordPress Plugin Sticky Menu on Scroll, Sticky Header, Sticky Welcome Bar for Any Theme-myStickymenu Unspecified Vulnerability (2.1.4)
-
-
High
WordPress Plugin Toggle The Title Cross-Site Scripting (1.4)
CVE-2019-14795
CWE-79
High
WordPress Plugin Ultimate FAQ Cross-Site Scripting (1.8.21)
CVE-2019-15643
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Vulnerabilities (2.0.45)
-
CWE-538
High
WordPress Plugin User Submitted Posts Arbitrary File Upload (20190426)
-
CWE-434
High
WordPress Plugin Virim PHP Object Injection (0.4)
CVE-2019-12240
CWE-915
High
WordPress Plugin Visual CSS Style Editor Cross-Site Request Forgery (7.2.0)
-
CWE-352
High
WordPress Plugin VO Store Locator-WP Store Locator Unspecified Vulnerability (3.2.14)
-
-
High
WordPress Plugin W3 Total Cache Server-Side Request Forgery (0.9.7.3)
-
CWE-918
High
WordPress Plugin Windsor Strava Athlete Unspecified Vulnerability (1.3.5)
-
-
High
WordPress Plugin WooCommerce Checkout Manager Cross-Site Request Forgery (4.3)
-
CWE-352
High