Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Ditty WordPress-Responsive Slider, List, and Ticker Display Cross-Site Scripting (3.0.14)
CVE-2022-0533
CWE-79
High
WordPress Plugin Ditty WordPress-Responsive Slider, List, and Ticker Display Cross-Site Scripting (3.0.32)
CVE-2023-23874
CWE-79
High
WordPress Plugin Donation Block For PayPal Cross-Site Scripting (2.0.0)
CVE-2023-0535
CWE-79
High
WordPress Plugin Donation Block For PayPal Unspecified Vulnerability (1.0.0)
-
-
High
WordPress Plugin Easy Accept Payments for PayPal Cross-Site Scripting (4.9.9)
CVE-2023-0275
CWE-79
High
WordPress Plugin Easy Affiliate Links Cross-Site Scripting (3.7.0)
CVE-2023-0375
CWE-79
High
WordPress Plugin Easy Appointments Cross-Site Scripting (3.11.0)
CVE-2022-4668
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (3.1.0.4)
CVE-2023-0380
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files SQL Injection (3.1.0.3)
CVE-2023-23489
CWE-89
High
WordPress Plugin Easy PayPal Buy Now Button Cross-Site Scripting (1.7.3)
CVE-2022-4628
CWE-79
High
WordPress Plugin Easy Social Box/Page Cross-Site Scripting (4.1.2)
CVE-2022-4754
CWE-79
High
WordPress Plugin Embed PDF Cross-Site Scripting (1.0.6)
CVE-2022-4788
CWE-79
High
WordPress Plugin EmbedSocial-Social Media Feeds, Reviews and Galleries Cross-Site Scripting (1.1.27)
CVE-2023-0371
CWE-79
High
WordPress Plugin EmbedStories-Display social media stories Cross-Site Scripting (0.7.4)
CVE-2023-0372
CWE-79
High
WordPress Plugin Enable Media Replace Arbitrary File Upload (4.0.1)
CVE-2023-0255
CWE-434
High
WordPress Plugin Enable Media Replace Directory Traversal (3.6.3)
CVE-2022-2554
CWE-22
High
WordPress Plugin EU Cookie Law for GDPR/CCPA Cross-Site Scripting (3.1.6)
CVE-2022-3811
CWE-79
High
WordPress Plugin Extensive VC Addons for WPBakery page builder Local File Inclusion (1.9)
CVE-2023-0159
CWE-22
High
WordPress Plugin FL3R FeelBox Multiple Vulnerabilities (8.1)
CVE-2022-4553
CWE-352
High
WordPress Plugin FluentAuth-The Ultimate Authorization & Security for WordPress Security Bypass (1.0.1)
CVE-2022-4746
CWE-693
High
WordPress Plugin Form for WordPress-Zoho Forms Cross-Site Scripting (3.0)
CVE-2023-0169
CWE-79
High
WordPress Plugin Galleries by Angie Makes Cross-Site Scripting (1.67)
CVE-2022-4795
CWE-79
High
WordPress Plugin Genesis Columns Advanced Cross-Site Scripting (2.0.3)
CVE-2022-4706
CWE-79
High
WordPress Plugin GeoDirectory Location Manager Multiple SQL Injection Vulnerabilities (2.1.0.9)
CVE-2021-24361
CWE-89
High
WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings Cross-Site Scripting (2.2.21)
CVE-2022-4775
CWE-79
High
WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings SQL Injection (2.2.23)
CVE-2023-0278
CWE-89
High
WordPress Plugin GigPress Cross-Site Scripting (2.3.27)
CVE-2022-4759
CWE-79
High
WordPress Plugin GigPress SQL Injection (2.3.28)
CVE-2023-0381
CWE-89
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.23.2)
CVE-2022-4448
CWE-79
High
WordPress Plugin GiveWP-Donation and Fundraising Platform SQL Injection (2.24.0)
CVE-2023-0224
CWE-89
High
WordPress Plugin GPT AI Power Security Bypass (1.4.37)
CVE-2023-0405
CWE-862
High
WordPress Plugin Greenshift-animation and page builder blocks Cross-Site Scripting (4.9.9)
CVE-2023-0378
CWE-79
High
WordPress Plugin Greenshift-animation and page builder blocks Cross-Site Scripting (4.8.8)
CVE-2022-4653
CWE-79
High
WordPress Plugin GS Books Showcase Cross-Site Scripting (1.3.0)
CVE-2023-0541
CWE-79
High
WordPress Plugin GS Filterable Portfolio Cross-Site Scripting (1.6.0)
CVE-2023-0540
CWE-79
High
WordPress Plugin GS Insever Portfolio Cross-Site Scripting (1.4.4)
CVE-2023-0539
CWE-79
High
WordPress Plugin GS Logo Slider-Ticker, Grid, List, Table & Filter Views Cross-Site Scripting (3.3.7)
CVE-2022-4624
CWE-79
High
WordPress Plugin GS Logo Slider-Ticker, Grid, List, Table & Filter Views Unspecified Vulnerability (3.3.8)
-
-
High
WordPress Plugin GS Portfolio for Envato Cross-Site Scripting (1.3.8)
CVE-2023-0559
CWE-79
High
WordPress Plugin GS Products Slider for WooCommerce Cross-Site Scripting (1.5.8)
CVE-2023-0492
CWE-79
High
WordPress Plugin HashBar-WordPress Notification Bar Cross-Site Scripting (1.3.5)
CVE-2022-4650
CWE-79
High
WordPress Plugin Hueman Addons Cross-Site Scripting (2.3.3)
CVE-2022-4784
CWE-79
High
WordPress Plugin Icon Widget Cross-Site Scripting (1.2.6)
CVE-2022-4763
CWE-79
High
WordPress Plugin Intuitive Custom Post Order Multiple Vulnerabilities (3.1.3)
CVE-2022-4386
CWE-862
High
WordPress Plugin Judge.me Product Reviews for WooCommerce Cross-Site Scripting (1.3.20)
CVE-2023-0061
CWE-79
High
WordPress Plugin Justified Gallery Cross-Site Scripting (1.7.0)
CVE-2022-4651
CWE-79
High
WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Cross-Site Scripting (1.4.9.8.9)
CVE-2022-4718
CWE-79
High
WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Cross-Site Scripting (1.4.9.5)
CVE-2021-25067
CWE-79
High
WordPress Plugin LearnPress-WordPress LMS Cross-Site Scripting (4.1.6.5)
-
CWE-79
High
WordPress Plugin LearnPress-WordPress LMS Multiple Vulnerabilities (4.1.7.3.2)
CVE-2022-47615
CWE-89
High
WordPress Plugin LearnPress-WordPress LMS PHP Object Injection (4.1.7.1)
CVE-2022-3360
CWE-915
High
WordPress Plugin Lightbox Gallery Cross-Site Scripting (0.9.4)
CVE-2022-4682
CWE-79
High
WordPress Plugin Lightweight Accordion Cross-Site Scripting (1.5.14)
CVE-2023-0373
CWE-79
High
WordPress Plugin List Pages Shortcode Cross-Site Scripting (1.7.4)
CVE-2022-4757
CWE-79
High
WordPress Plugin Loan Comparison Multiple Cross-Site Scripting Vulnerabilities (1.5.2)
CVE-2023-0442
CWE-79
High
WordPress Plugin Location Weather Cross-Site Scripting (1.3.3)
CVE-2023-0360
CWE-79
High
WordPress Plugin Login as User or Customer Privilege Escalation (3.2)
CVE-2022-4305
CWE-269
High
WordPress Plugin Login Logout Menu Cross-Site Scripting (1.3.3)
CVE-2022-4622
CWE-79
High
WordPress Plugin Login Logout Menu Multiple Cross-Site Scripting Vulnerabilities (1.3.3)
CVE-2022-4625
CWE-79
High
WordPress Plugin Login with phone number Cross-Site Scripting (1.4.1)
CVE-2023-23492
CWE-79
High
WordPress Plugin Mapwiz SQL Injection (1.0.1)
CVE-2022-4546
CWE-89
High
WordPress Plugin Markup (JSON-LD) structured in schema.org Cross-Site Scripting (4.8.1)
CVE-2022-4666
CWE-79
High
WordPress Plugin Media Library Assistant Information Disclosure (3.00)
CVE-2022-41618
CWE-200
High
WordPress Plugin Media Library Assistant SQL Injection (3.05)
CVE-2023-0279
CWE-89
High
WordPress Plugin MediaElement.js-HTML5 Video & Audio Player Cross-Site Scripting (4.2.8)
CVE-2022-4699
CWE-79
High
WordPress Plugin Meks Flexible Shortcodes Cross-Site Scripting (1.3.4)
CVE-2022-4562
CWE-79
High
WordPress Plugin Members Import Cross-Site Scripting (1.4.2)
CVE-2022-4663
CWE-79
High
WordPress Plugin Meteor Slides Cross-Site Scripting (1.5.6)
CVE-2022-4486
CWE-79
High
WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Cross-Site Scripting (3.1.2)
CVE-2023-0084
CWE-79
High
WordPress Plugin Mongoose Page Cross-Site Scripting (1.8.3)
CVE-2022-4675
CWE-79
High
WordPress Plugin Namaste! LMS Cross-Site Scripting (2.5.9.4)
-
CWE-79
High
WordPress Plugin Namaste! LMS Cross-Site Scripting (2.5.9.3)
CVE-2023-0548
CWE-79
High
WordPress Plugin Ocean Extra Cross-Site Scripting (1.9.4)
CVE-2021-25104
CWE-79
High
WordPress Plugin Ocean Extra Cross-Site Scripting (2.1.1)
CVE-2023-23891
CWE-79
High
WordPress Plugin Ocean Extra Multiple Vulnerabilities (2.1.2)
CVE-2023-24399
CWE-639
High