Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Thrive Headline Optimizer Security Bypass (1.3.7.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Leads Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Optimize Security Bypass (1.4.13.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Ovation Security Bypass (2.4.4)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Quiz Builder Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Themes Builder Security Bypass (2.2.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Ultimatum Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Tutor LMS-eLearning and online course solution Multiple Vulnerabilities (1.7.6)
CVE-2021-24185
CWE-264
High
WordPress Plugin Tutor LMS-eLearning and online course solution SQL Injection (1.8.2)
CVE-2021-24186
CWE-89
High
WordPress Plugin Under Construction, Coming Soon & Maintenance Mode Multiple Vulnerabilities (1.1.1)
-
CWE-918
High
WordPress Plugin User Profile Picture Information Disclosure (2.4.0)
CVE-2021-24170
CWE-200
High
WordPress Plugin Vertical News Scroller Unspecified Vulnerability (1.19)
-
-
High
WordPress Plugin VM Backups Cross-Site Request Forgery (1.0)
CVE-2021-24173
CWE-352
High
WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress CSV Injection (1.6.3)
-
CWE-20
High
WordPress Plugin WooCommerce Customers Manager Privilege Escalation (26.4)
-
CWE-264
High
WordPress Plugin WooCommerce Help Scout Arbitrary File Upload (2.9)
CVE-2021-24212
CWE-434
High
WordPress Plugin WooCommerce Upload Files Arbitrary File Upload (59.3)
CVE-2021-24171
CWE-434
High
WordPress Plugin WordPress Custom Global Variable Unspecified Vulnerability (3.0.0)
-
-
High
WordPress Plugin WordPress Related Posts Cross-Site Scripting (3.6.4)
CVE-2021-24211
CWE-79
High
WordPress Plugin WP Armour-Honeypot Anti Spam Cross-Site Scripting (1.5.6)
-
CWE-79
High
WordPress Plugin WP-Curriculo Vitae Free Arbitrary File Upload (6.3)
CVE-2021-24222
CWE-434
High
WordPress Plugin WP ERP-Complete WordPress Business Manager with HR, CRM & Accounting Systems for Small Businesses Cross-Site Request Forgery (1.7.4)
-
CWE-352
High
WordPress Plugin Cookie Information-Free GDPR Consent Solution Cross-Site Scripting (1.5.5)
-
CWE-79
High
WordPress Plugin WP Hotel Booking Remote Code Execution (1.10.2)
CVE-2020-29047
CWE-502
High
WordPress Plugin WP Page Builder Multiple Vulnerabilities (1.2.3)
CVE-2021-24208
CWE-264
High
WordPress Plugin WP Project Manager-Task, team, and project management featuring kanban board and gantt charts Cross-Site Request Forgery (2.4.9)
-
CWE-352
High
WordPress Plugin WP Super Cache Remote Code Execution (1.7.1)
CVE-2021-24209
CWE-94
High
WordPress Plugin WP Travel-Best Travel Booking, Tour Management Engine Cross-Site Request Forgery (4.4.6)
-
CWE-352
High
WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Unspecified Vulnerability (2.6.21)
-
-
High
WordPress Plugin Advanced Booking Calendar Cross-Site Scripting (1.6.6)
CVE-2021-24225
CWE-79
High
WordPress Plugin Advanced Booking Calendar Cross-Site Scripting (1.6.7)
CVE-2021-24232
CWE-79
High
WordPress Plugin Advanced Custom Fields PRO Cross-Site Scripting (5.9.0)
CVE-2021-24241
CWE-79
High
WordPress Plugin All 404 Redirect to Homepage Cross-Site Scripting (1.20)
CVE-2021-24326
CWE-79
High
WordPress Plugin All-in-One Addons for Elementor-WidgetKit Multiple Cross-Site Scripting Vulnerabilities (2.3.9)
CVE-2021-24267
CWE-79
High
WordPress Plugin BuddyPress Multiple Security Bypass Vulnerabilities (7.2.1)
-
CWE-264
High
WordPress Plugin Captchinoo, Google recaptcha for admin login page Cross-Site Request Forgery (2.4)
-
CWE-352
High
WordPress Plugin Captchinoo, Google recaptcha for admin login page Security Bypass (2.3)
-
CWE-264
High
WordPress Plugin Car Seller-Auto Classifieds Script SQL Injection (2.1.0)
CVE-2021-24285
CWE-89
High
WordPress Plugin classyfrieds Arbitrary File Upload (3.8)
CVE-2021-24253
CWE-434
High
WordPress Plugin Clever Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (2.0.15)
CVE-2021-24273
CWE-79
High
WordPress Plugin College publisher Import Arbitrary File Upload (0.1)
CVE-2021-24254
CWE-434
High
WordPress Plugin Conditional Marketing Mailer for WooCommerce Cross-Site Request Forgery (1.5.2)
-
CWE-352
High
WordPress Plugin Conditional Marketing Mailer for WooCommerce Security Bypass (1.5.1)
-
CWE-264
High
WordPress Plugin Conditional Marketing Mailer for WooCommerce Unspecified Vulnerability (1.6)
-
-
High
WordPress Plugin Content Copy Protection & Prevent Image Save Cross-Site Request Forgery (1.3)
CVE-2021-24333
CWE-352
High
WordPress Plugin Cooked Pro Cross-Site Scripting (1.7.5.5)
CVE-2021-24233
CWE-79
High
WordPress Plugin DethemeKit For Elementor Multiple Cross-Site Scripting Vulnerabilities (1.5.5.4)
CVE-2021-24270
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Request Forgery (2.10.2)
-
CWE-352
High
WordPress Plugin Easy Form Builder Arbitrary File Upload (1.0)
CVE-2021-24224
CWE-434
High
WordPress Plugin Edwiser Bridge-WordPress Moodle LMS Integration Unspecified Vulnerability (2.0.7)
-
-
High
WordPress Plugin Elementor Addon Elements Multiple Cross-Site Scripting Vulnerabilities (1.11.1)
CVE-2021-24259
CWE-79
High
WordPress Plugin Elementor-Header, Footer & Blocks Template Multiple Cross-Site Scripting Vulnerabilities (1.5.7)
CVE-2021-24256
CWE-79
High
WordPress Plugin Elements kit Elementor addons (Header & Footer Builder, Mega Menu Builder, Layout Library) Multiple Cross-Site Scripting Vulnerabilities (2.1.7)
CVE-2021-24258
CWE-79
High
WordPress Plugin Erident Custom Login and Dashboard Cross-Site Scripting (3.5.8)
CVE-2021-24658
CWE-79
High
WordPress Plugin Essential Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (4.5.3)
CVE-2021-24255
CWE-79
High
WordPress Plugin fitness calculators Cross-Site Request Forgery (1.9.5)
CVE-2021-24272
CWE-352
High
WordPress Plugin Freetobook review widget Unspecified Vulnerability (1.0)
-
-
High
WordPress Plugin freetobook widget Unspecified Vulnerability (1.0.5)
-
-
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.10.3)
CVE-2021-24315
CWE-79
High
WordPress Plugin Happy Addons for Elementor Cross-Site Scripting (2.23.0)
CVE-2021-24292
CWE-79
High
WordPress Plugin Happy Addons for Elementor Pro Cross-Site Scripting (1.16.0)
CVE-2021-24292
CWE-79
High
WordPress Plugin HT Mega-Absolute Addons for Elementor Page Builder Multiple Cross-Site Scripting Vulnerabilities (1.5.5)
CVE-2021-24261
CWE-79
High
WordPress Plugin Image Hover Effects-Elementor Addon Multiple Cross-Site Scripting Vulnerabilities (1.3.3)
CVE-2021-24264
CWE-79
High
WordPress Plugin Imagements Arbitrary File Upload (1.2.5)
CVE-2021-24236
CWE-434
High
WordPress Plugin Ivory Search-WordPress Search Cross-Site Scripting (4.6)
CVE-2021-24234
CWE-79
High
WordPress Plugin JetWidgets For Elementor Multiple Cross-Site Scripting Vulnerabilities (1.0.8)
CVE-2021-24268
CWE-79
High
WordPress Plugin Larsens Calender Cross-Site Scripting (1.2)
CVE-2020-23762
CWE-79
High
WordPress Plugin Livemesh Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (6.7.1)
CVE-2021-24260
CWE-79
High
WordPress Plugin Login as User or Customer Cross-Site Request Forgery (1.9)
-
CWE-352
High
WordPress Plugin Login as User or Customer Security Bypass (1.7)
-
CWE-264
High
WordPress Plugin Modern WPBakery Page Builder Addons (formerly Visual Composer)-Add-ons Arbitrary File Upload (3.0.1)
CVE-2021-24284
CWE-434
High
WordPress Plugin One page checkout and layouts for woocommerce Unspecified Vulnerability (2.7)
-
-
High
WordPress Plugin PowerPack Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (2.3.1)
CVE-2021-24263
CWE-79
High
WordPress Plugin Premium Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (4.2.7)
CVE-2021-24257
CWE-79
High
WordPress Plugin Redirection for Contact Form 7 Multiple Vulnerabilities (2.3.3)
CVE-2021-24282
CWE-915
High