Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12791 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin PhoneTrack Meu Site Manager Cross-Site Scripting (0.1)
CVE-2021-24534
CWE-79
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.78)
-
CWE-79
High
WordPress Plugin Poll Maker Cross-Site Scripting (3.2.8)
CVE-2021-34635
CWE-79
High
WordPress Plugin Post Index Cross-Site Request Forgery (0.7.5)
CVE-2021-34637
CWE-352
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Security Bypass (3.4.8)
CVE-2021-24527
CWE-264
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Scripting (7.1.13)
CVE-2021-20792
CWE-79
High
WordPress Plugin Qyrr-simply and modern QR-Code creation Cross-Site Scripting (0.6)
CVE-2021-24559
CWE-79
High
WordPress Plugin RestroPress-Online Food Ordering System Cross-Site Request Forgery (2.8.2)
-
CWE-352
High
WordPress Plugin RestroPress-Online Food Ordering System Security Bypass (2.8.3)
-
CWE-264
High
WordPress Plugin SendGrid Security Bypass (1.11.8)
CVE-2021-34629
CWE-264
High
WordPress Plugin SEO Backlinks Cross-Site Request Forgery (4.0.1)
CVE-2021-34632
CWE-352
High
WordPress Plugin Shantz WordPress QOTD Cross-Site Request Forgery (1.2.2)
CVE-2021-24380
CWE-352
High
WordPress Plugin Simple Banner Cross-Site Scripting (2.10.3)
CVE-2021-24574
CWE-79
High
WordPress Plugin Simple Post Cross-Site Scripting (1.1)
CVE-2021-24567
CWE-79
High
WordPress Plugin Simple Social Media Share Buttons-Social Sharing for Everyone Cross-Site Scripting (3.2.2)
CVE-2021-24486
CWE-79
High
WordPress Plugin Slider Hero with Animation, Video Background SQL Injection (8.2.6)
CVE-2021-24506
CWE-89
High
WordPress Plugin Social Tape Cross-Site Request Forgery (1.0)
CVE-2021-24411
CWE-352
High
WordPress Plugin Telugu Bible Verse Daily Cross-Site Request Forgery (1.0)
CVE-2021-24410
CWE-352
High
WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (6.0.9)
-
CWE-79
High
WordPress Plugin Translate WordPress with GTranslate Cross-Site Scripting (2.8.64)
CVE-2021-34630
CWE-79
High
WordPress Plugin VDZ CallBack Cross-Site Scripting (1.14.5)
-
CWE-79
High
WordPress Plugin VDZ VERIFICATION (Custom Meta Tags) Cross-Site Scripting (1.3.12)
-
CWE-79
High
WordPress Plugin Verse-O-Matic Cross-Site Request Forgery (4.1.1)
CVE-2021-24466
CWE-352
High
WordPress Plugin VikRentCar Car Rental Management System Cross-Site Scripting (1.1.9)
CVE-2021-24519
CWE-79
High
WordPress Plugin Welcart e-Commerce Information Disclosure (2.2.7)
-
CWE-200
High
WordPress Plugin Wonder PDF Embed Cross-Site Scripting (1.6)
CVE-2021-24541
CWE-79
High
WordPress Plugin Wonder Video Embed Cross-Site Scripting (1.7)
CVE-2021-24540
CWE-79
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Local File Inclusion (1.3.6.2)
CVE-2021-24566
CWE-98
High
WordPress Plugin WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection-StopBadBots SQL Injection (6.59)
-
CWE-89
High
WordPress Plugin WP Fusion Lite-Marketing Automation for WordPress Multiple Vulnerabilities (3.37.18)
CVE-2021-34661
CWE-352
High
WordPress Plugin WP Simple Booking Calendar SQL Injection (2.0.6)
-
CWE-89
High
WordPress Plugin WP SMS Cross-Site Scripting (5.4.12)
CVE-2021-24561
CWE-79
High
WordPress Plugin WPFront Scroll Top Cross-Site Scripting (2.0.5.07184)
CVE-2021-24564
CWE-79
High
WordPress Plugin WPFront Scroll Top Cross-Site Scripting (2.0.6.07225)
-
CWE-79
High
WordPress Plugin WPGraphQL Denial of Service (1.3.5)
CVE-2021-31157
CWE-400
High
WordPress Plugin YouTube Embed Cross-Site Scripting (5.2.1)
CVE-2021-24471
CWE-79
High
WordPress Plugin Youtube Feeder Cross-Site Request Forgery (2.0.1)
CVE-2021-34633
CWE-352
High
WordPress Plugin 2Way VideoCalls and Random Chat-HTML5 Webcam Videochat Cross-Site Scripting (5.2.7)
CVE-2021-34656
CWE-79
High
WordPress Plugin 3D Cover Carousel Cross-Site Scripting (1.0)
CVE-2021-38318
CWE-79
High
WordPress Plugin 3DPrint Lite Arbitrary File Upload (1.9.1.4)
-
CWE-434
High
WordPress Plugin 4k Icons for Visual Composer-Free Cross-Site Scripting (1.0)
CVE-2021-24435
CWE-79
High
WordPress Plugin Ad Blocker Notify Lite Cross-Site Scripting (2.4.0)
CVE-2021-24435
CWE-79
High
WordPress Plugin Add Product Tabs for WooCommerce Security Bypass (1.4.2)
-
CWE-264
High
WordPress Plugin AddToAny Share Buttons Cross-Site Scripting (1.7.45)
CVE-2021-24568
CWE-79
High
WordPress Plugin Advanced Search Cross-Site Scripting (1.1.2)
CVE-2021-38348
CWE-79
High
WordPress Plugin Affiliate PRO Cross-Site Scripting (1.3.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Afterpay Gateway for WooCommerce Cross-Site Scripting (3.2.0)
-
CWE-79
High
WordPress Plugin Alojapro Widget Cross-Site Scripting (1.1.15)
CVE-2021-24530
CWE-79
High
WordPress Plugin AMP extensions Cross-Site Scripting (1.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Aoi Tori Cross-Site Scripting (1.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Appointment Scheduling for Zoom GoogleMeet and more-Wappointment Cross-Site Scripting (2.2.4)
-
CWE-79
High
WordPress Plugin Auto Amazon Links-Amazon Associates Affiliate Cross-Site Scripting (4.6.19)
-
CWE-79
High
WordPress Plugin Autopilot SEO for WooCommerce Security Bypass (1.5.1)
-
CWE-264
High
WordPress Plugin Availability Calendar Cross-Site Scripting (1.2.1)
CVE-2021-24604
CWE-79
High
WordPress Plugin Availability Calendar SQL Injection (1.2)
CVE-2021-24606
CWE-89
High
WordPress Plugin Awesome Support-WordPress HelpDesk & Support Cross-Site Scripting (6.0.5)
CVE-2021-24435
CWE-79
High
WordPress Plugin BetterOptin Cross-Site Scripting (2.0.2)
CVE-2021-24435
CWE-79
High
WordPress Plugin Blog social sharing component Cross-Site Request Forgery (1.4.5)
-
CWE-352
High
WordPress Plugin Blog social sharing component Cross-Site Scripting (1.4.4)
CVE-2021-24618
CWE-79
High
WordPress Plugin Blue Admin Cross-Site Request Forgery (21.06.01)
CVE-2021-24581
CWE-352
High
WordPress Plugin Bold Page Builder PHP Object Injection (3.1.5)
CVE-2021-24579
CWE-915
High
WordPress Plugin Book appointment online Cross-Site Scripting (1.38)
CVE-2021-24614
CWE-79
High
WordPress Plugin Booster for WooCommerce Security Bypass (5.4.3)
CVE-2021-34646
CWE-264
High
WordPress Plugin Bootstrap Categories Gallery Cross-Site Scripting (1.0.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Border Loading Bar Cross-Site Scripting (1.0.1)
CVE-2021-38338
CWE-79
High
WordPress Plugin BuddyPress Customer.io Analytics Integration Cross-Site Request Forgery (1.1.6)
-
CWE-352
High
WordPress Plugin BuddyPress Multiple Vulnerabilities (9.0.0)
-
CWE-200
High
WordPress Plugin Bug Library Cross-Site Scripting (2.0.3)
CVE-2021-38355
CWE-79
High
WordPress Plugin Bulk Add to Cart for WooCommerce Security Bypass (1.2.2)
-
CWE-264
High
WordPress Plugin BulletProof Security Information Disclosure (5.1)
CVE-2021-39327
CWE-200
High
WordPress Plugin Business Hours Indicator Cross-Site Scripting (2.3.4)
CVE-2021-24593
CWE-79
High
WordPress Plugin Calendar_plugin Cross-Site Scripting (1.0)
CVE-2021-34667
CWE-79
High
WordPress Plugin Catchers Helpdesk and Ticket system for Support Cross-Site Scripting (2.6.7)
CVE-2021-24435
CWE-79
High
WordPress Plugin CBX Bookmark & Favorite Cross-Site Scripting (1.6.8)
-
CWE-79
High
WordPress Plugin Clean Login Cross-Site Scripting (1.12.6.3)
-
CWE-79
High