Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Very Simple Quiz Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin WordPress Appointment Booking and Online Scheduling by Appointy Cross-Site Scripting (2.40)
-
CWE-79
High
WordPress Plugin WordPress Colorbox Lightbox Cross-Site Scripting (1.1.2)
-
CWE-79
High
WordPress Plugin WordPress fancyBox Lightbox Cross-Site Scripting (1.0.1)
-
CWE-79
High
WordPress Plugin Wordpress Poll SQL Injection (36)
CVE-2020-24315
CWE-89
High
WordPress Plugin WP Customer Reviews Cross-Site Scripting (3.4.2)
CVE-2021-24135
CWE-79
High
WordPress Plugin WP Elegant Testimonial Cross-Site Scripting (1.1.6)
-
CWE-79
High
WordPress Plugin WP Floating Menu-One page navigator, sticky menu for WordPress Cross-Site Scripting (1.3.0)
CVE-2020-25378
CWE-79
High
WordPress Plugin WP smart CRM & Invoices FREE Cross-Site Scripting (1.8.7)
CVE-2020-25375
CWE-79
High
WordPress Plugin 10Web Social Post Feed Unspecified Vulnerability (1.1.26)
-
-
High
WordPress Plugin 10WebAnalytics Cross-Site Request Forgery (1.2.8)
-
CWE-352
High
WordPress Plugin ActiveCampaign-Forms, Site Tracking, Live Chat Cross-Site Request Forgery (8.0.1)
CVE-2021-24133
CWE-352
High
WordPress Plugin Add From Server Directory Traversal (3.3.3)
-
CWE-22
High
WordPress Plugin Advanced Database Cleaner SQL Injection (3.0.1)
CVE-2021-24141
CWE-89
High
WordPress Plugin Affiliates Manager Unspecified Vulnerability (2.7.7)
-
-
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Request Forgery (4.4.3)
-
CWE-352
High
WordPress Plugin Asset CleanUp:Page Speed Booster Cross-Site Scripting (1.3.6.7)
-
CWE-79
High
WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Cross-Site Request Forgery (4.2.152)
CVE-2020-35950
CWE-352
High
WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Security Bypass (4.2.12)
CVE-2020-35948
CWE-264
High
WordPress Plugin Chamber Dashboard Business Directory Cross-Site Scripting (3.2.8)
CVE-2020-24699
CWE-79
High
WordPress Plugin Coming Soon & Maintenance Mode Page Cross-Site Request Forgery (1.57)
-
CWE-352
High
WordPress Plugin Constant Contact Forms Cross-Site Scripting (1.8.7)
CVE-2021-24134
CWE-79
High
WordPress Plugin Cool Timeline (Horizontal & Vertical Timeline) Cross-Site Request Forgery (2.0.2)
-
CWE-352
High
WordPress Plugin Coupon Creator Cross-Site Request Forgery (3.1)
-
CWE-352
High
WordPress Plugin Custom Dashboard & Login Page-AGCA Cross-Site Request Forgery (6.5.4)
-
CWE-352
High
WordPress Plugin Custom Field Template Cross-Site Request Forgery (2.5.1)
-
CWE-352
High
WordPress Plugin Discount Rules for WooCommerce Security Bypass (2.2.0)
-
CWE-264
High
WordPress Plugin Dokan-Best WooCommerce Multivendor Marketplace Solution-Build Your Own Amazon, eBay, Etsy Cross-Site Request Forgery (3.0.8)
-
CWE-352
High
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Arbitrary File Upload (1.3.5.4)
CVE-2020-24389
CWE-434
High
WordPress Plugin Easy Testimonials Cross-Site Request Forgery (3.6.1)
-
CWE-352
High
WordPress Plugin eCommerce Product Catalog for WordPress Cross-Site Request Forgery (2.9.43)
-
CWE-352
High
WordPress Plugin Elementor Addon Elements Cross-Site Request Forgery (1.6.3)
-
CWE-352
High
WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.13)
CVE-2020-15020
CWE-79
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (4.5.5)
CVE-2020-5780
CWE-284
High
WordPress Plugin Feed Them Social-for Twitter feed, Youtube and more Cross-Site Request Forgery (2.8.6)
-
CWE-352
High
WordPress Plugin File Manager Arbitrary File Upload (6.8)
CVE-2020-25213
CWE-434
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Request Forgery (1.13.4)
-
CWE-352
High
WordPress Plugin Funnel Builder by CartFlows-Create High Converting Sales Funnels For WordPress Cross-Site Request Forgery (1.5.15)
-
CWE-352
High
WordPress Plugin Import/Export Customizer Settings Cross-Site Request Forgery (1.0.3)
-
CWE-352
High
WordPress Plugin LearnPress-WordPress LMS Cross-Site Request Forgery (3.2.7.2)
-
CWE-352
High
WordPress Plugin Lightweight Sidebar Manager Cross-Site Request Forgery (1.1.4)
-
CWE-352
High
WordPress Plugin Menu Swapper Cross-Site Request Forgery (1.1.0.2)
-
CWE-352
High
WordPress Plugin MetaSlider Cross-Site Scripting (3.17.1)
-
CWE-79
High
WordPress Plugin Multivendor Marketplace Solution for WooCommerce-WC Marketplace Cross-Site Request Forgery (3.5.7)
-
CWE-352
High
WordPress Plugin NextScripts:Social Networks Auto-Poster Security Bypass (4.3.17)
-
CWE-264
High
WordPress Plugin NotificationX-WooCommerce Sales Notification Popup, Custom & Live Sales Notification, FOMO, Social Proof, Announcement Banner & Sticky Notification Bar Cross-Site Request Forgery (1.8.2)
-
CWE-352
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Request Forgery (2.4.2)
CVE-2020-36754
CWE-352
High
WordPress Plugin Product Catalog X Cross-Site Request Forgery (1.5.12)
-
CWE-352
High
WordPress Plugin Radio Buttons for Taxonomies Cross-Site Request Forgery (2.0.5)
-
CWE-352
High
WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Cross-Site Request Forgery (3.4.2)
-
CWE-352
High
WordPress Plugin Simple:Press-WordPress Forum Arbitrary File Upload (6.6.0)
-
CWE-434
High
WordPress Plugin Slider by 10Web-Responsive Image Slider SQL Injection (1.2.35)
CVE-2021-24132
CWE-89
High
WordPress Plugin Sticky Menu, Sticky Header (or anything!) on Scroll Cross-Site Request Forgery (2.2)
-
CWE-352
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Request Forgery (2.9.4)
-
CWE-352
High
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Cross-Site Request Forgery (2.3.9)
-
CWE-352
High
WordPress Plugin WP Courses LMS Security Bypass (2.0.28)
CVE-2020-26876
CWE-264
High
WordPress Plugin WP ERP-Complete WordPress Business Manager with HR, CRM & Accounting Systems for Small Businesses Cross-Site Request Forgery (1.6.3)
-
CWE-352
High
WordPress Plugin WP Hotel Booking Cross-Site Request Forgery (1.10.1)
-
CWE-352
High
WordPress Plugin WP Project Manager-Task, team, and project management featuring kanban board and gantt charts Cross-Site Request Forgery (2.4.0)
CVE-2020-36745
CWE-352
High
WordPress Plugin Advanced Booking Calendar SQL Injection (1.6.1)
-
CWE-89
High
WordPress Plugin Appointment Booking Calendar-BirchPress Scheduler Unspecified Vulnerability (1.13.0)
-
-
High
WordPress Plugin Child Theme Creator by Orbisius Cross-Site Request Forgery (1.5.1)
CVE-2020-28649
CWE-352
High
WordPress Plugin CM Download Manager Cross-Site Scripting (2.7.0)
CVE-2020-27344
CWE-79
High
WordPress Plugin Coditor-Code Editor Security Bypass (1.1)
-
CWE-264
High
WordPress Plugin Comment System for WordPress & Ajax Comments-Comment Press Cross-Frame Scripting (2.7.0)
-
CWE-79
High
WordPress Plugin Dynamic Content for Elementor Remote Code Execution (1.9.5.6)
CVE-2020-26596
CWE-94
High
WordPress Plugin Helios Solutions Brand Logo Slider Arbitrary File Upload (2.1)
-
CWE-434
High
WordPress Plugin HyperComments Arbitrary File Deletion (1.2.2)
-
CWE-73
High
WordPress Plugin Live Chat-Live support Cross-Site Request Forgery (3.1.0)
CVE-2020-5642
CWE-352
High
WordPress Plugin Loginizer SQL Injection (1.6.3)
CVE-2020-27615
CWE-89
High
WordPress Plugin Mailster-Email Newsletter for WordPress Cross-Site Scripting (2.4.5.1)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Request Forgery (3.4.27)
CVE-2020-36174
CWE-352
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Unspecified Vulnerability (3.4.27.1)
CVE-2020-36173
-
High
WordPress Plugin Post Grid Multiple Vulnerabilities (2.0.71)
CVE-2020-35938
CWE-915
High
WordPress Plugin PowerPress Podcasting by Blubrry Arbitrary File Upload (8.3.7)
CVE-2021-24123
CWE-434
High