Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12791 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WP-Lister Lite for Amazon Cross-Site Scripting (2.4.3)
CVE-2022-4369
CWE-79
High
WordPress Plugin WP RSS By Publishers Multiple SQL Injection Vulnerabilities (0.1)
CVE-2022-4360
CWE-89
High
WordPress Plugin WP Smart Import: Import any XML File to WordPress Cross-Site Scripting (1.0.2)
CVE-2022-40209
CWE-79
High
WordPress Plugin WP Smart Import: Import any XML File to WordPress Server-Side Request Forgery (1.0.0)
CVE-2020-24147
CWE-918
High
WordPress Plugin WP Social Sharing Cross-Site Scripting (2.2)
CVE-2022-4198
CWE-79
High
WordPress Plugin WP Statistics Cross-Site Scripting (13.2.1)
CVE-2022-27231
CWE-79
High
WordPress Plugin WP Statistics SQL Injection (13.2.8)
CVE-2022-4230
CWE-89
High
WordPress Plugin WP User-Custom Registration Forms, Login and User Profile Multiple Vulnerabilities (7.0)
CVE-2022-4519
CWE-89
High
WordPress Plugin WPQA-Builder forms Addon For WordPress Insecure Direct Object Reference (5.9.2)
CVE-2022-3343
CWE-639
High
WordPress Plugin YITH WooCommerce Gift Cards Premium Arbitrary File Upload (3.19.0)
CVE-2022-45359
CWE-434
High
WordPress Plugin YITH WooCommerce Gift Cards Premium Unspecified Vulnerability (3.20.0)
-
-
High
WordPress Plugin YITH WooCommerce Gift Cards Unspecified Vulnerability (2.14.0)
-
-
High
WordPress Plugin 0mk Shortener Cross-Site Request Forgery (0.2)
CVE-2022-2933
CWE-352
High
WordPress Plugin 10Web Map Builder for Google Maps Cross-Site Scripting (1.0.71)
CVE-2022-4758
CWE-79
High
WordPress Plugin 10Web Map Builder for Google Maps SQL Injection (1.0.72)
-
CWE-89
High
WordPress Plugin Accordion Shortcodes Cross-Site Scripting (2.4.2)
CVE-2022-4781
CWE-79
High
WordPress Plugin All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs-My Sticky Elements Cross-Site Scripting (2.0.3)
CVE-2022-0148
CWE-79
High
WordPress Plugin All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs-My Sticky Elements SQL Injection (2.0.8)
CVE-2023-0487
CWE-89
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Directory Traversal (5.1.4)
-
CWE-22
High
WordPress Plugin Amazon JS Cross-Site Scripting (0.10)
CVE-2023-0075
CWE-79
High
WordPress Plugin amr shortcode any widget Cross-Site Scripting (4.0)
CVE-2022-4458
CWE-79
High
WordPress Plugin Arigato Autoresponder and Newsletter Cross-Site Scripting (2.7.1.1)
CVE-2023-0543
CWE-79
High
WordPress Plugin Auto Publish for Google My Business Cross-Site Scripting (3.3)
CVE-2022-4790
CWE-79
High
WordPress Plugin BackUpWordPress Unspecified Vulnerability (3.12)
-
-
High
WordPress Plugin Better Font Awesome Cross-Site Scripting (2.0.3)
CVE-2022-4512
CWE-79
High
WordPress Plugin Bold Timeline Lite Cross-Site Scripting (1.1.4)
CVE-2022-4828
CWE-79
High
WordPress Plugin Booster Elite for WooCommerce Multiple Cross-Site Request Forgery Vulnerabilities (6.0.0)
CVE-2022-4017
CWE-352
High
WordPress Plugin Booster Plus for WooCommerce Multiple Cross-Site Request Forgery Vulnerabilities (6.0.0)
CVE-2022-4017
CWE-352
High
WordPress Plugin Bootstrap Shortcodes Cross-Site Scripting (3.4.0)
CVE-2022-4777
CWE-79
High
WordPress Plugin BruteBank-WP Security & Firewall Cross-Site Request Forgery (1.8)
CVE-2022-4443
CWE-352
High
WordPress Plugin CBX Petition for WordPress SQL Injection (1.0.3)
CVE-2022-4383
CWE-89
High
WordPress Plugin ContentStudio Multiple Vulnerabilities (1.2.5)
CVE-2023-0558
CWE-862
High
WordPress Plugin Contextual Related Posts Cross-Site Scripting (3.3.0)
CVE-2023-0252
CWE-79
High
WordPress Plugin Contextual Related Posts Multiple Vulnerabilities (3.3.1)
-
CWE-862
High
WordPress Plugin Correos Woocommerce Arbitrary File Download (1.3.0.0)
CVE-2023-0331
CWE-552
High
WordPress Plugin CPT Bootstrap Carousel Cross-Site Scripting (1.12)
CVE-2022-4834
CWE-79
High
WordPress Plugin Custom 404 Pro Cross-Site Request Forgery (3.7.1)
CVE-2023-0385
CWE-352
High
WordPress Plugin Custom 404 Pro Unspecified Vulnerability (3.7.0)
-
-
High
WordPress Plugin Custom Add User Cross-Site Scripting (2.0.2)
CVE-2023-0043
CWE-79
High
WordPress Plugin Customer Reviews for WooCommerce Cross-Site Scripting (5.16.0)
CVE-2023-0079
CWE-79
High
WordPress Plugin Customer Reviews for WooCommerce Local File Inclusion (5.15.0)
CVE-2023-0080
CWE-22
High
WordPress Plugin Ditty WordPress-Responsive Slider, List, and Ticker Display Cross-Site Scripting (3.0.14)
CVE-2022-0533
CWE-79
High
WordPress Plugin Ditty WordPress-Responsive Slider, List, and Ticker Display Cross-Site Scripting (3.0.32)
CVE-2023-23874
CWE-79
High
WordPress Plugin Donation Block For PayPal Cross-Site Scripting (2.0.0)
CVE-2023-0535
CWE-79
High
WordPress Plugin Donation Block For PayPal Unspecified Vulnerability (1.0.0)
-
-
High
WordPress Plugin Easy Accept Payments for PayPal Cross-Site Scripting (4.9.9)
CVE-2023-0275
CWE-79
High
WordPress Plugin Easy Affiliate Links Cross-Site Scripting (3.7.0)
CVE-2023-0375
CWE-79
High
WordPress Plugin Easy Appointments Cross-Site Scripting (3.11.0)
CVE-2022-4668
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (3.1.0.4)
CVE-2023-0380
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files SQL Injection (3.1.0.3)
CVE-2023-23489
CWE-89
High
WordPress Plugin Easy PayPal Buy Now Button Cross-Site Scripting (1.7.3)
CVE-2022-4628
CWE-79
High
WordPress Plugin Easy Social Box/Page Cross-Site Scripting (4.1.2)
CVE-2022-4754
CWE-79
High
WordPress Plugin Embed PDF Cross-Site Scripting (1.0.6)
CVE-2022-4788
CWE-79
High
WordPress Plugin EmbedSocial-Social Media Feeds, Reviews and Galleries Cross-Site Scripting (1.1.27)
CVE-2023-0371
CWE-79
High
WordPress Plugin EmbedStories-Display social media stories Cross-Site Scripting (0.7.4)
CVE-2023-0372
CWE-79
High
WordPress Plugin Enable Media Replace Arbitrary File Upload (4.0.1)
CVE-2023-0255
CWE-434
High
WordPress Plugin Enable Media Replace Directory Traversal (3.6.3)
CVE-2022-2554
CWE-22
High
WordPress Plugin EU Cookie Law for GDPR/CCPA Cross-Site Scripting (3.1.6)
CVE-2022-3811
CWE-79
High
WordPress Plugin Extensive VC Addons for WPBakery page builder Local File Inclusion (1.9)
CVE-2023-0159
CWE-22
High
WordPress Plugin FL3R FeelBox Multiple Vulnerabilities (8.1)
CVE-2022-4553
CWE-352
High
WordPress Plugin FluentAuth-The Ultimate Authorization & Security for WordPress Security Bypass (1.0.1)
CVE-2022-4746
CWE-693
High
WordPress Plugin Form for WordPress-Zoho Forms Cross-Site Scripting (3.0)
CVE-2023-0169
CWE-79
High
WordPress Plugin Galleries by Angie Makes Cross-Site Scripting (1.67)
CVE-2022-4795
CWE-79
High
WordPress Plugin Genesis Columns Advanced Cross-Site Scripting (2.0.3)
CVE-2022-4706
CWE-79
High
WordPress Plugin GeoDirectory Location Manager Multiple SQL Injection Vulnerabilities (2.1.0.9)
CVE-2021-24361
CWE-89
High
WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings Cross-Site Scripting (2.2.21)
CVE-2022-4775
CWE-79
High
WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings SQL Injection (2.2.23)
CVE-2023-0278
CWE-89
High
WordPress Plugin GigPress Cross-Site Scripting (2.3.27)
CVE-2022-4759
CWE-79
High
WordPress Plugin GigPress SQL Injection (2.3.28)
CVE-2023-0381
CWE-89
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.23.2)
CVE-2022-4448
CWE-79
High
WordPress Plugin GiveWP-Donation and Fundraising Platform SQL Injection (2.24.0)
CVE-2023-0224
CWE-89
High
WordPress Plugin GPT AI Power Security Bypass (1.4.37)
CVE-2023-0405
CWE-862
High
WordPress Plugin Greenshift-animation and page builder blocks Cross-Site Scripting (4.9.9)
CVE-2023-0378
CWE-79
High
WordPress Plugin Greenshift-animation and page builder blocks Cross-Site Scripting (4.8.8)
CVE-2022-4653
CWE-79
High
WordPress Plugin GS Books Showcase Cross-Site Scripting (1.3.0)
CVE-2023-0541
CWE-79
High