Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13326 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Contact Form 7 Database Addon-CFDB7 CSV Injection (1.2.5.5)
CVE-2021-24144
CWE-20
High
WordPress Plugin Contact Form Submissions SQL Injection (1.6.4)
CVE-2021-24125
CWE-89
High
WordPress Plugin Contact Form Unspecified Vulnerability (1.1.9)
-
-
High
WordPress Plugin Controlled Admin Access Security Bypass (1.4.0)
CVE-2021-24215
CWE-284
High
WordPress Plugin Controlled Admin Access Security Bypass (1.5.5)
-
CWE-264
High
WordPress Plugin Database Backups Cross-Site Request Forgery (1.2.2.6)
CVE-2021-24174
CWE-352
High
WordPress Plugin Defender Security-Malware Scanner, Login Security & Firewall Cross-Site Request Forgery (2.4.6)
-
CWE-352
High
WordPress Plugin Dokan-Best WooCommerce Multivendor Marketplace Solution-Build Your Own Amazon, eBay, Etsy Cross-Site Request Forgery (3.2.0)
-
CWE-352
High
WordPress Plugin Elementor Website Builder Multiple Cross-Site Scripting Vulnerabilities (3.1.1)
CVE-2021-24206
CWE-79
High
WordPress Plugin EWWW Image Optimizer Cross-Site Request Forgery (5.8.1)
-
CWE-352
High
WordPress Plugin EWWW Image Optimizer Denial of Service (6.0.1)
CVE-2020-29384
CWE-400
High
WordPress Plugin Facebook for WordPress Cross-Site Request Forgery (3.0.3)
CVE-2021-24218
CWE-352
High
WordPress Plugin Facebook for WordPress PHP Object Injection (2.2.2)
CVE-2021-24217
CWE-915
High
WordPress Plugin File Manager Cross-Site Scripting (7.0)
CVE-2021-24177
CWE-79
High
WordPress Plugin Five Star Restaurant Menu-WordPress Ordering Remote Code Execution (2.2.0)
CVE-2020-29045
CWE-502
High
WordPress Plugin Flo Forms-Easy Drag & Drop Form Builder Multiple Vulnerabilities (1.0.35)
-
CWE-264
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Request Forgery (1.14.8)
-
CWE-352
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.9.7)
CVE-2021-24213
CWE-79
High
WordPress Plugin Ivory Search-WordPress Search Cross-Site Scripting (4.5.10)
-
CWE-79
High
WordPress Plugin JH 404 Logger Cross-Site Scripting (1.1)
CVE-2021-24176
CWE-79
High
WordPress Plugin MapifyLite (by MapifyPro) Cross-Site Scripting (3.3)
-
CWE-79
High
WordPress Plugin Mapplic-Custom Interactive Map Server-Side Request Forgery (6.1)
-
CWE-918
High
WordPress Plugin Mapplic Lite Server-Side Request Forgery (1.0)
-
CWE-918
High
WordPress Plugin Modern Events Calendar Lite Multiple Vulnerabilities (5.16.5)
CVE-2021-24149
CWE-434
High
WordPress Plugin Modern Events Calendar Lite Multiple Vulnerabilities (5.16.2)
CVE-2021-24147
CWE-200
High
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (3.1.9)
CVE-2021-24148
CWE-264
High
WordPress Plugin N5 Upload Form Arbitrary File Upload (1.0)
CVE-2021-24223
CWE-434
High
WordPress Plugin NextGEN Pro Cross-Site Scripting (3.1.9)
CVE-2021-24293
CWE-79
High
WordPress Plugin Ocean Extra Cross-Site Request Forgery (1.6.5)
-
CWE-352
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.5.5)
CVE-2021-20678
CWE-89
High
WordPress Plugin Patreon WordPress Multiple Cross-Site Scripting Vulnerabilities (1.7.1)
CVE-2021-24229
CWE-79
High
WordPress Plugin Patreon WordPress Multiple Vulnerabilities (1.6.9)
CVE-2021-24231
CWE-538
High
WordPress Plugin PhastPress Open Redirect (1.110)
CVE-2021-24210
CWE-601
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.5.54)
CVE-2021-24139
CWE-89
High
WordPress Plugin Polls CP Unspecified Vulnerability (1.0.17)
-
-
High
WordPress Plugin PowerPress Podcasting by Blubrry Multiple Vulnerabilities (8.4.4)
-
CWE-352
High
WordPress Plugin Process Steps Template Designer Cross-Site Request Forgery (1.2.1)
-
CWE-352
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker SQL Injection (7.1.13)
-
CWE-89
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker SQL Injection (7.1.11)
CVE-2021-24221
CWE-89
High
WordPress Plugin Related Posts for WordPress Cross-Site Scripting (2.0.3)
CVE-2021-24180
CWE-79
High
WordPress Plugin SEO Redirection-301 Redirect Manager Cross-Site Scripting (6.3)
CVE-2021-24327
CWE-79
High
WordPress Plugin Social Slider Widget Cross-Site Scripting (1.8.4)
CVE-2021-24196
CWE-79
High
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk SQL Injection (5.153.3)
CVE-2021-24295
CWE-89
High
WordPress Plugin Style Kits-Advanced Theme Styles for Elementor Cross-Site Request Forgery (1.8.0)
-
CWE-352
High
WordPress Plugin Super Interactive Maps for WordPress SQL Injection (2.1)
-
CWE-89
High
WordPress Plugin Super Store Finder for WordPress (Google Maps Store Locator) SQL Injection (6.3)
-
CWE-89
High
WordPress Plugin The Plus Addons for Elementor Security Bypass (4.1.6)
CVE-2021-24175
CWE-264
High
WordPress Plugin Thrive Apprentice Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Architect Security Bypass (2.6.7.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Comments Security Bypass (1.4.15.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Dashboard Security Bypass (2.3.9.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Headline Optimizer Security Bypass (1.3.7.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Leads Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Optimize Security Bypass (1.4.13.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Ovation Security Bypass (2.4.4)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Quiz Builder Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Themes Builder Security Bypass (2.2.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Ultimatum Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Tutor LMS-eLearning and online course solution Multiple Vulnerabilities (1.7.6)
CVE-2021-24185
CWE-264
High
WordPress Plugin Tutor LMS-eLearning and online course solution SQL Injection (1.8.2)
CVE-2021-24186
CWE-89
High
WordPress Plugin Under Construction, Coming Soon & Maintenance Mode Multiple Vulnerabilities (1.1.1)
-
CWE-918
High
WordPress Plugin User Profile Picture Information Disclosure (2.4.0)
CVE-2021-24170
CWE-200
High
WordPress Plugin Vertical News Scroller Unspecified Vulnerability (1.19)
-
-
High
WordPress Plugin VM Backups Cross-Site Request Forgery (1.0)
CVE-2021-24173
CWE-352
High
WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress CSV Injection (1.6.3)
-
CWE-20
High
WordPress Plugin WooCommerce Customers Manager Privilege Escalation (26.4)
-
CWE-264
High
WordPress Plugin WooCommerce Help Scout Arbitrary File Upload (2.9)
CVE-2021-24212
CWE-434
High
WordPress Plugin WooCommerce Upload Files Arbitrary File Upload (59.3)
CVE-2021-24171
CWE-434
High
WordPress Plugin WordPress Custom Global Variable Unspecified Vulnerability (3.0.0)
-
-
High
WordPress Plugin WordPress Related Posts Cross-Site Scripting (3.6.4)
CVE-2021-24211
CWE-79
High
WordPress Plugin WP Armour-Honeypot Anti Spam Cross-Site Scripting (1.5.6)
-
CWE-79
High
WordPress Plugin WP-Curriculo Vitae Free Arbitrary File Upload (6.3)
CVE-2021-24222
CWE-434
High
WordPress Plugin WP ERP-Complete WordPress Business Manager with HR, CRM & Accounting Systems for Small Businesses Cross-Site Request Forgery (1.7.4)
-
CWE-352
High
WordPress Plugin Cookie Information-Free GDPR Consent Solution Cross-Site Scripting (1.5.5)
-
CWE-79
High
WordPress Plugin WP Hotel Booking Remote Code Execution (1.10.2)
CVE-2020-29047
CWE-502
High