Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13071 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Import Social Events Cross-Site Scripting (1.6.6)
-
CWE-79
High
WordPress Plugin JoomSport-for Sports: Team & League, Football, Hockey & more SQL Injection (3.3)
CVE-2019-14348
CWE-89
High
WordPress Plugin JSON API Open Redirect (1.1.3)
-
CWE-601
High
WordPress Plugin Learning Courses Privilege Escalation (4.7)
CVE-2019-15775
CWE-264
High
WordPress Plugin Link Log-external link click monitor SQL Injection (2.0)
CVE-2015-9344
CWE-89
High
WordPress Plugin Listing, Classified Ads & Business Directory-uListing Arbitrary File Upload (1.2.1)
-
CWE-434
High
WordPress Plugin Login or Logout Menu Item Security Bypass (1.1.1)
CVE-2019-15820
CWE-264
High
WordPress Plugin Maintenance Cross-Site Request Forgery (3.6.4)
-
CWE-352
High
WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Security Bypass (4.16)
-
CWE-264
High
WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection (3.2.10)
CVE-2019-14314
CWE-89
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups SQL Injection (3.44)
CVE-2019-14695
CWE-89
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Request Forgery (2.0.2)
-
CWE-352
High
WordPress Plugin Product Addons & Fields for WooCommerce Cross-Site Scripting (18.3)
CVE-2019-14948
CWE-79
High
WordPress Plugin Restaurant Reservations Privilege Escalation (1.3)
CVE-2019-15819
CWE-264
High
WordPress Plugin RSVPMaker SQL Injection (6.1.9)
CVE-2019-15646
CWE-89
High
WordPress Plugin Sell Downloads Unspecified Vulnerability (1.0.85)
-
-
High
WordPress Plugin Simple 301 Redirects-Addon-Bulk Uploader Multiple Security Bypass Vulnerabilities (1.2.4)
CVE-2019-15818
CWE-264
High
WordPress Plugin Simple Membership Security Bypass (3.8.5)
-
CWE-264
High
WordPress Plugin Social LikeBox & Feed Cross-Site Scripting (2.8.4)
CVE-2019-15781
CWE-79
High
WordPress Plugin Theme Check Cross-Site Request Forgery (20190208.1)
-
CWE-352
High
WordPress Plugin Travel Management Privilege Escalation (1.5)
CVE-2019-15773
CWE-264
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.13.4)
CVE-2017-18593
CWE-79
High
WordPress Plugin UserPro-Community and User Profile Cross-Site Scripting (4.9.33)
CVE-2019-14470
CWE-79
High
WordPress Plugin WooCommerce Address Book Cross-Site Request Forgery (1.5.6)
CVE-2019-15770
CWE-352
High
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Multiple Vulnerabilities (2.2.4)
CVE-2019-15858
CWE-264
High
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Security Bypass (2.2.5)
CVE-2019-14773
CWE-264
High
WordPress Plugin WordPress Portfolio and Gallery-GridKit Gallery Unspecified Vulnerability (1.8.18)
-
-
High
WordPress Plugin WP Add Mime Types Cross-Site Request Forgery (2.2.1)
-
CWE-352
High
WordPress Plugin WP DSGVO Tools (GDPR) Cross-Site Request Forgery (2.2.18)
CVE-2019-15777
CWE-352
High
WordPress Plugin WP Fastest Cache Directory Traversal (0.8.9.5)
CVE-2019-13635
CWE-22
High
WordPress Plugin WP Photo Album Plus Unspecified Vulnerability (7.2.04)
-
-
High
WordPress Plugin WP Private Content Plus Security Bypass (1.31)
CVE-2019-15816
CWE-264
High
WordPress Plugin WP Shopify Cross-Site Scripting (2.0.4)
-
CWE-79
High
WordPress Plugin WP Social Feed Gallery Cross-Site Request Forgery (2.4.7)
CVE-2019-15779
CWE-352
High
WordPress Plugin WP-Spreadplugin Multiple Vulnerabilities (4.4.4)
-
CWE-352
High
WordPress Plugin WP-ViperGB Cross-Site Scripting (1.3.15)
CVE-2015-9356
CWE-79
High
WordPress Plugin Zero BS WordPress CRM Cross-Site Request Forgery (2.99.9)
-
CWE-352
High
WordPress Plugin Advanced Access Manager Unspecified Vulnerability (5.9.8.1)
-
-
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (3.2.6)
CVE-2019-16520
CWE-79
High
WordPress Plugin API Bearer Auth Cross-Site Scripting (20181229)
CVE-2019-16332
CWE-79
High
WordPress Plugin Checklist Cross-Site Scripting (1.1.5)
CVE-2019-16525
CWE-79
High
WordPress Plugin DW Mega Menu Cross-Site Request Forgery (1.0.1)
-
CWE-352
High
WordPress Plugin Easy Registration Forms Unspecified Vulnerability (1.8.4)
-
-
High
WordPress Plugin ECPay Logistics for WooCommerce Cross-Site Scripting (1.2.181030)
-
CWE-79
High
WordPress Plugin Event Tickets CSV Injection (4.10.7.1)
CVE-2019-16120
CWE-20
High
WordPress Plugin Groundhogg-Marketing Automation & CRM for WordPress Arbitrary File Disclosure (2.0.9.4)
-
CWE-538
High
WordPress Plugin Human Presence Cross-Site Scripting (2.0.8)
-
CWE-79
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Vulnerabilities (1.5.34)
CVE-2019-16119
CWE-89
High
WordPress Plugin Portrait-Archiv.com Photostore Cross-Site Scripting (3.1)
-
CWE-79
High
WordPress Plugin Qwizcards-online quizzes and flashcards Cross-Site Scripting (3.36)
-
CWE-79
High
WordPress Plugin Save Abandoned Carts-WooCommerce Live Checkout Field Capture Unspecified Vulnerability (3.2.1)
-
-
High
WordPress Plugin Search Exclude Security Bypass (1.2.2)
CVE-2019-15895
CWE-264
High
WordPress Plugin Sell Downloads Cross-Site Scripting (1.0.86)
-
CWE-79
High
WordPress Plugin SlickQuiz Multiple Vulnerabilities (1.3.7.1)
CVE-2019-12517
CWE-89
High
WordPress Plugin Spryng Payments for WooCommerce Cross-Site Scripting (1.6.7)
-
CWE-79
High
WordPress Plugin Ultimate Google Analytics Cross-Site Request Forgery (1.6.0)
-
CWE-352
High
WordPress Plugin WP BASE Booking of Appointments, Services and Events PHP Object Injection (3.5.0)
-
CWE-915
High
WordPress Plugin WP Human Resource Management Security Bypass (2.2.14)
-
CWE-264
High
WordPress Plugin WP Server Log Viewer Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin About Author Cross-Site Scripting (1.3.9)
-
CWE-79
High
WordPress Plugin Advanced AJAX Product Filters Security Bypass (1.3.6.1)
-
CWE-264
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Open Redirect (4.4.1)
-
CWE-601
High
WordPress Plugin Animate It! Cross-Site Scripting (2.3.4)
CVE-2019-17385
CWE-79
High
WordPress Plugin Animate It! Cross-Site Scripting (2.3.3)
CVE-2019-17384
CWE-79
High
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.11.8)
CVE-2019-16521
CWE-79
High
WordPress Plugin Car Demon Multiple Vulnerabilities (1.7.97)
-
CWE-352
High
WordPress Plugin Click to Chat Cross-Site Scripting (1.6)
-
CWE-79
High
WordPress Plugin Coming Soon Page & Maintenance Mode Unspecified Vulnerability (1.8.2)
-
-
High
WordPress Plugin DELUCKS SEO Cross-Site Scripting (2.1.7)
-
CWE-79
High
WordPress Plugin Download Plugins and Themes from Dashboard Cross-Site Scripting (1.5.0)
CVE-2019-17239
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Security Bypass (2.9.16)
-
CWE-264
High
WordPress Plugin Easy FancyBox Cross-Site Scripting (1.8.17)
CVE-2019-16524
CWE-79
High
WordPress Plugin Easy Pixels eCommerce extension Unspecified Vulnerability (1.4)
-
-
High
WordPress Plugin Easy Pixels Unspecified Vulnerability (1.8.2)
-
-
High
WordPress Plugin Easy Social Feed-Social Photos Gallery-Post Feed-Like Box Cross-Site Scripting (4.4.1)
-
CWE-79
High