Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Recipe Card Blocks for Gutenberg & Elementor Cross-Site Scripting (2.8.2)
CVE-2021-24634
CWE-79
High
WordPress Plugin Recipe Card Blocks for Gutenberg & Elementor Cross-Site Scripting (2.8.0)
CVE-2021-24632
CWE-79
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Cross-Site Scripting (3.7.2.2)
-
CWE-79
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Privilege Escalation (3.7.1.4)
-
CWE-264
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction SQL Injection (3.7.1.5)
CVE-2021-24731
CWE-89
High
WordPress Plugin RESPONSIVE 3D SLIDER SQL Injection (1.2)
CVE-2021-24398
CWE-89
High
WordPress Plugin Responsive Poll Cross-Site Scripting (1.5.8)
-
CWE-79
High
WordPress Plugin Schreikasten SQL Injection (0.14.18)
CVE-2021-24630
CWE-89
High
WordPress Plugin Simple Job Board Cross-Site Scripting (2.9.4)
CVE-2021-39328
CWE-79
High
WordPress Plugin Simple Schools Staff Directory Arbitrary File Upload (1.1)
CVE-2021-24663
CWE-434
High
WordPress Plugin SMTP Mail Cross-Site Scripting (1.1.14)
-
CWE-79
High
WordPress Plugin SMTP Mail SQL Injection (1.2.1)
-
CWE-89
High
WordPress Plugin Social Sharing-Sassy Social Share PHP Object Injection (3.3.23)
CVE-2021-39321
CWE-915
High
WordPress Plugin SpiderCatalog SQL Injection (1.7.3)
CVE-2021-24625
CWE-89
High
WordPress Plugin Stripe For WooCommerce Security Bypass (3.3.9)
CVE-2021-39347
CWE-264
High
WordPress Plugin TextMe SMS Cross-Site Scripting (1.8.8)
-
CWE-79
High
WordPress Plugin The Sorter SQL Injection (1.0)
CVE-2021-24399
CWE-89
High
WordPress Plugin Timetable and Event Schedule by MotoPress Cross-Site Request Forgery (2.4.1)
CVE-2021-24584
CWE-352
High
WordPress Plugin Timetable and Event Schedule by MotoPress Cross-Site Scripting (2.3.18)
CVE-2021-24724
CWE-79
High
WordPress Plugin Timetable and Event Schedule by MotoPress Information Disclosure (2.3.19)
CVE-2021-24585
CWE-200
High
WordPress Plugin Unlimited PopUps SQL Injection (4.5.3)
CVE-2021-24631
CWE-89
High
WordPress Plugin WooCommerce Affiliate-Coupon Affiliates Cross-Site Request Forgery (4.11.3.3)
-
CWE-352
High
WordPress Plugin WooCommerce Affiliate-Coupon Affiliates Cross-Site Scripting (4.11.0.1)
-
CWE-79
High
WordPress Plugin WooCommerce PDF Invoice Bulk Download Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin WooCommerce Salesforce Integration Cross-Site Scripting (1.5.8)
-
CWE-79
High
WordPress Plugin WooCommerce Zoho Integration-CRM, Books, Invoice, Inventory Cross-Site Scripting (1.2.3)
-
CWE-79
High
WordPress Plugin WordPress Page Contact SQL Injection (1.0)
CVE-2021-24403
CWE-89
High
WordPress Plugin WordPress Popups for Marketing and Email Newsletters, Lead Generation and Conversions by OptinMonster Security Bypass (2.6.4)
CVE-2021-39341
CWE-264
High
WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Cross-Site Scripting (5.10.1)
CVE-2021-24525
CWE-79
High
WordPress Plugin Wow Forms-create any form with custom style SQL Injection (3.1.3)
CVE-2021-24628
CWE-89
High
WordPress Plugin WP Bannerize SQL Injection (4.0.2)
CVE-2021-39351
CWE-89
High
WordPress Plugin WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection-StopBadBots Cross-Site Scripting (6.61)
-
CWE-79
High
WordPress Plugin WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection-StopBadBots Unspecified Vulnerability (6.66)
-
-
High
WordPress Plugin WP-Board SQL Injection (1.1)
CVE-2021-24404
CWE-89
High
WordPress Plugin WP Domain Redirect SQL Injection (1.0)
CVE-2021-24401
CWE-89
High
WordPress Plugin WP DSGVO Tools (GDPR) Cross-Site Scripting (3.1.23)
-
CWE-79
High
WordPress Plugin WP Gravity Forms Insightly Cross-Site Scripting (1.0.6)
-
CWE-79
High
WordPress Plugin WP Gravity Forms Zendesk Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin WP Gravity Forms Zoho CRM Add-on Cross-Site Scripting (1.1.5)
-
CWE-79
High
WordPress Plugin WP iCommerce-the first interactive ecommerce for wordpress SQL Injection (1.1.1)
CVE-2021-24402
CWE-89
High
WordPress Plugin WP Infusionsoft WooCommerce Cross-Site Scripting (1.0.8)
-
CWE-79
High
WordPress Plugin WP Insightly for Contact Form 7 and Ninja Forms Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin WP Video Lightbox Cross-Site Scripting (1.9.2)
CVE-2021-24665
CWE-79
High
WordPress Plugin Zoho CRM Lead Magnet Cross-Site Scripting (1.7.2.8)
CVE-2021-33849
CWE-79
High
WordPress Plugin Zoho CRM Lead Magnet Unspecified Vulnerability (1.7.2.9)
-
-
High
WordPress Plugin Affiliate Power-Sales Tracking for Affiliate Marketers Cross-Site Scripting (2.2.0)
-
CWE-79
High
WordPress Plugin Age Gate Cross-Site Scripting (2.16.3)
-
CWE-79
High
WordPress Plugin Age Gate Security Bypass (2.17.0)
-
CWE-264
High
WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.3.16)
CVE-2021-24712
CWE-79
High
WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.3.15)
CVE-2021-24673
CWE-79
High
WordPress Plugin Better Find and Replace Cross-Site Scripting (1.2.8)
CVE-2021-24676
CWE-79
High
WordPress Plugin Bitcoin/AltCoin Payment Gateway for WooCommerce & Multivendor store/shop Cross-Site Scripting (1.6.0)
CVE-2021-24679
CWE-79
High
WordPress Plugin Booking Package-Appointment Booking Calendar System Cross-Site Scripting (1.5.10)
CVE-2021-20840
CWE-79
High
WordPress Plugin Browser and Operating System Finder Cross-Site Request Forgery (1.1)
CVE-2021-20851
CWE-352
High
WordPress Plugin Bug Library Unspecified Vulnerability (2.0.7)
-
-
High
WordPress Plugin Chained Quiz Cross-Site Scripting (1.2.7)
CVE-2021-24690
CWE-79
High
WordPress Plugin CM Tooltip Glossary-Better SEO and UEX for your WP site Cross-Site Scripting (3.9.20)
CVE-2021-24678
CWE-79
High
WordPress Plugin Coming soon and Maintenance mode Cross-Site Scripting (3.5.2)
CVE-2021-24577
CWE-79
High
WordPress Plugin Coming soon and Maintenance mode Unspecified Vulnerability (3.5.4)
-
-
High
WordPress Plugin Contact Form Email Cross-Site Scripting (1.3.24)
CVE-2021-42361
CWE-79
High
WordPress Plugin Cookie Notice & Compliance for GDPR/CCPA Cross-Site Scripting (2.1.1)
CVE-2021-24569
CWE-79
High
WordPress Plugin CoolClock-a Javascript Analog Clock Cross-Site Scripting (4.3.4)
CVE-2021-24670
CWE-79
High
WordPress Plugin Countdown Block Security Bypass (1.1.1)
CVE-2021-24633
CWE-264
High
WordPress Plugin Docket Cache-Object Cache Accelerator Cross-Site Scripting (21.08.01)
-
CWE-79
High
WordPress Plugin Duplicate Page Cross-Site Scripting (4.4.2)
CVE-2021-24681
CWE-79
High
WordPress Plugin Easy Accordion-Best Accordion FAQ Cross-Site Scripting (2.0.21)
CVE-2021-24576
CWE-79
High
WordPress Plugin Easy Google Maps Cross-Site Scripting (1.9.33)
CVE-2021-39346
CWE-79
High
WordPress Plugin Easy Registration Forms Cross-Site Request Forgery (2.1.1)
CVE-2021-39353
CWE-352
High
WordPress Plugin ELEX WooCommerce Google Shopping (Google Product Feed) Cross-Site Scripting (1.2.3)
-
CWE-79
High
WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Unspecified Vulnerability (5.0.09)
-
-
High
WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings Cross-Site Scripting (2.1.1.2)
-
CWE-79
High
WordPress Plugin Gutenberg Block Editor Toolkit-EditorsKit Remote Code Execution (1.31.5)
CVE-2021-24546
CWE-94
High
WordPress Plugin HAL Cross-Site Scripting (2.1.1)
CVE-2021-39345
CWE-79
High
WordPress Plugin Inline Related Posts Multiple Cross-Site Scripting Vulnerabilities (3.0.4)
CVE-2021-35470
CWE-79
High
WordPress Plugin Job Board Vanila Cross-Site Scripting (1.0)
CVE-2021-39334
CWE-79
High