Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Loco Translate Unspecified Vulnerability (2.5.4)
-
-
High
WordPress Plugin Login/Signup Popup (Inline Form + Woocommerce) Cross-Site Request Forgery (2.2)
CVE-2022-0215
CWE-352
High
WordPress Plugin Logo Slider and Showcase Security Bypass (1.3.36)
CVE-2021-24742
CWE-863
High
WordPress Plugin MAZ Loader-Preloader Builder for WordPress Cross-Site Request Forgery (1.4.0)
CVE-2021-24668
CWE-352
High
WordPress Plugin MAZ Loader-Preloader Builder for WordPress SQL Injection (1.3.2)
CVE-2021-24669
CWE-89
High
WordPress Plugin MContact Button includes Backdoor [Only if downloaded via the vendor website] (2.0.6)
CVE-2021-24867
CWE-912
High
WordPress Plugin Media File Renamer-Auto & Manual Rename Cross-Site Request Forgery (5.2.5)
CVE-2021-36850
CWE-352
High
WordPress Plugin Mega Menu for WordPress-AP Mega Menu includes Backdoor [Only if downloaded via the vendor website] (3.0.5)
CVE-2021-24867
CWE-912
High
WordPress Plugin Mitsol Social Post Feed Cross-Site Scripting (1.10)
CVE-2022-0209
CWE-79
High
WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar Cross-Site Scripting (3.0.1)
-
CWE-79
High
WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar Multiple Cross-Site Scripting Vulnerabilities (2.4.1)
CVE-2021-24624
CWE-79
High
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Arbitrary File Upload (3.4.4)
-
CWE-434
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.5.8.1)
CVE-2021-24381
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.6.6)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress SQL Injection (3.6.3)
CVE-2021-24889
CWE-89
High
WordPress Plugin Permalink Manager Lite SQL Injection (2.2.12)
CVE-2021-24769
CWE-89
High
WordPress Plugin Permalink Manager Lite Unspecified Vulnerability (2.2.13.1)
-
-
High
WordPress Plugin Phoenix Media Rename Security Bypass (3.4.2)
CVE-2021-24816
CWE-264
High
WordPress Plugin PI Button includes Backdoor [Only if downloaded via the vendor website] (3.3.3)
CVE-2021-24867
CWE-912
High
WordPress Plugin Pricing Table Builder-AP Pricing Tables Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.2)
CVE-2021-24867
CWE-912
High
WordPress Plugin Print-O-Matic Cross-Site Scripting (2.0.2)
CVE-2021-24710
CWE-79
High
WordPress Plugin Product Slider For WooCommerce Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.5)
CVE-2021-24867
CWE-912
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Cross-Site Scripting (4.7.4)
CVE-2022-0233
CWE-79
High
WordPress Plugin PublishPress Future: Automatically Unpublish WordPress Posts Cross-Site Scripting (2.7.0)
-
CWE-79
High
WordPress Plugin PublishPress Future: Automatically Unpublish WordPress Posts Security Bypass (2.5.1)
CVE-2021-24783
CWE-264
High
WordPress Plugin qTranslate X Multiple Cross-Site Scripting Vulnerabilities (3.4.6.8)
-
CWE-79
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple Vulnerabilities (7.3.6)
CVE-2022-0182
CWE-352
High
WordPress Plugin Quiz Tool Lite Multiple Cross-Site Scripting Vulnerabilities (2.3.15)
CVE-2021-24701
CWE-79
High
WordPress Plugin Qwizcards-online quizzes and flashcards Cross-Site Scripting (3.61)
CVE-2021-24706
CWE-79
High
WordPress Plugin Random Banner Cross-Site Scripting (4.1.4)
CVE-2022-0210
CWE-79
High
WordPress Plugin Redirect 404 Error Page to Homepage or Custom Page with Logs Cross-Site Request Forgery (1.7.8)
CVE-2021-24767
CWE-352
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Open Redirect (3.7.2.3)
-
CWE-601
High
WordPress Plugin Request a Quote Cross-Site Scripting (2.3.4)
CVE-2021-24489
CWE-79
High
WordPress Plugin Responsive Clients Logo Gallery for WordPress-Smart Logo Showcase Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Responsive Media Gallery for WordPress-Everest Gallery Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.8)
CVE-2021-24867
CWE-912
High
WordPress Plugin Responsive Notification Bar for WordPress-Apex Notification Bar Lite includes Backdoor [Only if downloaded via the vendor website] (2.0.4)
CVE-2021-24867
CWE-912
High
WordPress Plugin Responsive Products Showcase Listing for WordPress-WP Product Gallery Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.1)
CVE-2021-24867
CWE-912
High
WordPress Plugin Responsive WordPress Slider Cross-Site Scripting (2.2.0)
CVE-2021-24544
CWE-79
High
WordPress Plugin Responsive WordPress Timeline-Everest Timeline Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.1)
CVE-2021-24867
CWE-912
High
WordPress Plugin Restaurant Menu by MotoPress Cross-Site Scripting (2.4.1)
CVE-2021-24722
CWE-79
High
WordPress Plugin School Management System-WPSchoolPress Multiple Cross-Site Scripting Vulnerabilities (2.1.16)
CVE-2021-24664
CWE-79
High
WordPress Plugin School Management System-WPSchoolPress Multiple Vulnerabilities (2.1.9)
CVE-2021-24575
CWE-89
High
WordPress Plugin Secure File Manager Arbitrary File Upload (2.9.3)
-
CWE-434
High
WordPress Plugin Side Cart Woocommerce (Ajax) Cross-Site Request Forgery (2.0)
CVE-2022-0215
CWE-352
High
WordPress Plugin Similar Posts-Best Related Posts for WordPress Remote Code Execution (3.1.5)
CVE-2021-24537
CWE-94
High
WordPress Plugin Simple Download Monitor Cross-Site Scripting (3.9.10)
CVE-2021-24694
CWE-79
High
WordPress Plugin Simple Download Monitor Multiple Cross-Site Request Forgery Vulnerabilities (3.9.8)
CVE-2021-24696
CWE-352
High
WordPress Plugin Simple Download Monitor Multiple Cross-Site Scripting Vulnerabilities (3.9.4)
CVE-2021-24697
CWE-79
High
WordPress Plugin Simple Download Monitor Multiple Vulnerabilities (3.9.5.1)
CVE-2021-24698
CWE-264
High
WordPress Plugin Smart Scroll Posts for WordPress includes Backdoor [Only if downloaded via the vendor website] (2.0.8)
CVE-2021-24867
CWE-912
High
WordPress Plugin Smartest Way To Design & Customize WordPress Comments & Comment Form-WP Comment Designer Lite includes Backdoor [Only if downloaded via the vendor website] (2.0.3)
CVE-2021-24867
CWE-912
High
WordPress Plugin Social Auto Poster includes Backdoor [Only if downloaded via the vendor website] (2.1.3)
CVE-2021-24867
CWE-912
High
WordPress Plugin Social Review includes Backdoor [Only if downloaded via the vendor website] (1.0.8)
CVE-2021-24867
CWE-912
High
WordPress Plugin Sports Rankings and Lists Cross-Site Scripting (3.5)
-
CWE-79
High
WordPress Plugin St-Daily-Tip Cross-Site Request Forgery (4.7)
CVE-2021-24487
CWE-352
High
WordPress Plugin Storefront Footer Text Cross-Site Scripting (1.0.1)
CVE-2021-24607
CWE-79
High
WordPress Plugin Stylish Price List Security Bypass (6.8.14)
CVE-2021-24757
CWE-863
High
WordPress Plugin Stylish Price List Security Bypass (6.9.0)
CVE-2021-24770
CWE-863
High
WordPress Plugin Subscriptions & Memberships for PayPal Cross-Site Scripting (1.1.2)
-
CWE-79
High
WordPress Plugin Subscriptions & Memberships for PayPal Unspecified Vulnerability (1.1.5)
-
-
High
WordPress Plugin TAuto Poster includes Backdoor [Only if downloaded via the vendor website] (1.4.5)
CVE-2021-24867
CWE-912
High
WordPress Plugin Testimonial WordPress-AP Custom Testimonial includes Backdoor [Only if downloaded via the vendor website] (1.4.6)
CVE-2021-24867
CWE-912
High
WordPress Plugin Testimonial WordPress-AP Custom Testimonial Unspecified Vulnerability (1.4.7)
-
-
High
WordPress Plugin The Easiest WordPress Media Manager-WP Media Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.2)
CVE-2021-24867
CWE-912
High
WordPress Plugin Themify Builder Cross-Site Scripting (5.3.1)
-
CWE-79
High
WordPress Plugin to Manage/Design WordPress Blog-WP Blog Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin Total GDPR Compliance Lite-WordPress for GDPR Compatibility includes Backdoor [Only if downloaded via the vendor website] (1.0.4)
CVE-2021-24867
CWE-912
High
WordPress Plugin Total Team Lite-Responsive Team Manager/Showcase for WordPress includes Backdoor [Only if downloaded via the vendor website] (1.1.1)
CVE-2021-24867
CWE-912
High
WordPress Plugin Two Way CHAT-Send or receive messages to your user Multiple Vulnerabilities (3.1.4)
-
CWE-352
High
WordPress Plugin Ultimate Coming Soon, Maintenance Mode for WordPress-Everest Coming Soon Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin User Registration, Login & Landing Pages-LeadMagic Cross-Site Scripting (1.2.7)
CVE-2022-0232
CWE-79
High
WordPress Plugin Video Gallery-Vimeo and YouTube Gallery Cross-Site Scripting (1.1.4)
CVE-2021-24515
CWE-79
High
WordPress Plugin Video Player for YouTube Cross-Site Scripting (1.3)
CVE-2021-24414
CWE-79
High
WordPress Plugin Vision Interactive For WordPress Cross-Site Scripting (1.4.4)
-
CWE-79
High
WordPress Plugin Visitor Traffic Real Time Statistics SQL Injection (3.8)
CVE-2021-24829
CWE-89
High