Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Ocean Extra PHP Object Injection (2.0.4)
CVE-2022-3374
CWE-915
High
WordPress Plugin Oi Yandex.Maps for WordPress Cross-Site Scripting (3.2.7)
CVE-2023-22721
CWE-79
High
WordPress Plugin Olevmedia Shortcodes Multiple Cross-Site Scripting Vulnerabilities (1.1.9)
CVE-2023-25798
CWE-79
High
WordPress Plugin Opening Hours Cross-Site Scripting (2.3.0)
CVE-2022-4752
CWE-79
High
WordPress Plugin Optimize images ALT Text (alt tag) & names for SEO using AI Cross-Site Request Forgery (2.0.7)
CVE-2022-4548
CWE-352
High
WordPress Plugin Page Builder:Live Composer Cross-Site Scripting (1.5.22)
CVE-2022-4669
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (4.5.4)
CVE-2023-23820
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (4.5.3)
CVE-2023-23996
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (3.2.15)
-
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Multiple Cross-Site Scripting Vulnerabilities (4.5.0)
CVE-2022-4698
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Multiple Cross-Site Scripting Vulnerabilities (3.2.2)
CVE-2021-24955
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress PHP Object Injection (4.3.2)
CVE-2022-45083
CWE-915
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Scripting (2.9.8)
CVE-2022-4830
CWE-79
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Scripting (2.6.5)
CVE-2021-24979
CWE-79
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Scripting (2.5.9.1)
-
CWE-79
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.6.6)
CVE-2021-25114
CWE-89
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.9.7)
CVE-2023-23488
CWE-89
High
WordPress Plugin Pardakht Delkhah Cross-Site Scripting (2.9.2)
CVE-2022-4307
CWE-79
High
WordPress Plugin Parsi Date Cross-Site Scripting (4.0.1)
-
CWE-79
High
WordPress Plugin Passster-Password Protection Cross-Site Scripting (3.5.5.7)
CVE-2021-24837
CWE-79
High
WordPress Plugin Passster-Password Protection Security Bypass (3.5.5.8)
CVE-2021-24881
CWE-284
High
WordPress Plugin PDF Viewer Cross-Site Scripting (0.1)
CVE-2023-0033
CWE-79
High
WordPress Plugin Pinpoint Booking System-#1 WordPress Booking SQL Injection (2.9.9.2.8)
CVE-2023-0220
CWE-89
High
WordPress Plugin PixCodes Cross-Site Scripting (2.3.6)
CVE-2022-4671
CWE-79
High
WordPress Plugin Portfolio for Elementor, Image Gallery & Post Grid-PowerFolio Cross-Site Scripting (2.3)
CVE-2022-4765
CWE-79
High
WordPress Plugin Portfolio for Elementor, Image Gallery & Post Grid-PowerFolio Security Bypass (2.1.6)
-
CWE-862
High
WordPress Plugin Portfolio for Elementor, Image Gallery & Post Grid-PowerFolio Unspecified Vulnerability (2.3.1)
-
-
High
WordPress Plugin Post Views Count (Support caching plugins!) Cross-Site Scripting (3.0.2)
CVE-2022-4761
CWE-79
High
WordPress Plugin Print Invoice & Delivery Notes for WooCommerce Cross-Site Scripting (4.7.1)
CVE-2023-0479
CWE-79
High
WordPress Plugin Print-O-Matic Cross-Site Scripting (2.1.7)
CVE-2022-4753
CWE-79
High
WordPress Plugin Product Slider and Carousel with Category for WooCommerce Cross-Site Scripting (2.7.1)
CVE-2022-4791
CWE-79
High
WordPress Plugin Product Slider for WooCommerce by PickPlugins Cross-Site Scripting (1.13.41)
CVE-2023-0166
CWE-79
High
WordPress Plugin Product Slider for WooCommerce Cross-Site Scripting (2.6.3)
CVE-2022-4629
CWE-79
High
WordPress Plugin Product Slider for WooCommerce Security Bypass (2.5.6)
CVE-2022-2382
CWE-862
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (3.6.7)
CVE-2022-0884
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Information Disclosure (3.9.0)
CVE-2023-0814
CWE-200
High
WordPress Plugin Quick Event Manager Multiple Vulnerabilities (9.7.4)
CVE-2023-23979
CWE-862
High
WordPress Plugin Quick Restaurant Menu Multiple Vulnerabilities (2.0.2)
CVE-2023-0555
CWE-639
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Request Forgery (8.0.7)
CVE-2022-46862
CWE-352
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple Vulnerabilities (8.0.4)
CVE-2022-4033
CWE-80
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple Vulnerabilities (7.3.10)
CVE-2022-42883
CWE-862
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple Vulnerabilities (8.0.8)
CVE-2023-0292
CWE-862
High
WordPress Plugin Rate my Post-WP Rating System Cross-Site Scripting (3.3.8)
CVE-2022-4673
CWE-79
High
WordPress Plugin Rate my Post-WP Rating System Multiple Vulnerabilities (3.3.4)
CVE-2022-40671
CWE-362
High
WordPress Plugin Real Media Library:Media Library Folder & File Manager Cross-Site Scripting (4.18.28)
CVE-2023-0285
CWE-79
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Open Redirect (3.8.2.2)
CVE-2023-0552
CWE-601
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Security Bypass (3.8.1.2)
CVE-2022-4024
CWE-862
High
WordPress Plugin Responsive Gallery Grid Cross-Site Scripting (2.3.8)
CVE-2023-0060
CWE-79
High
WordPress Plugin Rich Table of Contents Cross-Site Scripting (1.3.7)
CVE-2022-4551
CWE-79
High
WordPress Plugin ShiftNav-Responsive Mobile Menu Cross-Site Scripting (1.7.1)
CVE-2022-4627
CWE-79
High
WordPress Plugin ShopLentor-WooCommerce Builder for Elementor & Gutenberg +10 Modules-All in One Solution (formerly WooLentor) Multiple Vulnerabilities (2.5.3)
CVE-2023-0232
CWE-915
High
WordPress Plugin Shortcode for Font Awesome Cross-Site Scripting (1.4)
CVE-2023-0419
CWE-79
High
WordPress Plugin ShortPixel Adaptive Images-WebP, AVIF, CDN, Image Optimization Cross-Site Scripting (3.6.2)
CVE-2023-0334
CWE-79
High
WordPress Plugin Show-Hide/Collapse-Expand Cross-Site Scripting (1.2.5)
CVE-2022-4829
CWE-79
High
WordPress Plugin Simple File Downloader Cross-Site Scripting (1.0.4)
CVE-2022-4764
CWE-79
High
WordPress Plugin Simple URLs-Link Cloaking, Product Displays, and Affiliate Link Management Multiple Vulnerabilities (114)
CVE-2023-0099
CWE-89
High
WordPress Plugin Social Like Box and Page by WpDevArt Cross-Site Scripting (0.8.40)
CVE-2023-0177
CWE-79
High
WordPress Plugin Social Like Box and Page by WpDevArt Unspecified Vulnerability (0.8.39)
-
-
High
WordPress Plugin Social Sharing Toolkit Cross-Site Scripting (2.6)
CVE-2022-4835
CWE-79
High
WordPress Plugin Spectra-WordPress Gutenberg Blocks Cross-Site Scripting (1.14.11)
CVE-2020-36656
CWE-79
High
WordPress Plugin Spectra-WordPress Gutenberg Blocks Cross-Site Scripting (1.25.5)
-
CWE-79
High
WordPress Plugin Spectra-WordPress Gutenberg Blocks Multiple Security Bypass Vulnerabilities (2.3.0)
CVE-2023-23834
CWE-284
High
WordPress Plugin Spotlight Social Feeds [Block, Shortcode, and Widget] Cross-Site Scripting (1.4.2)
CVE-2023-0379
CWE-79
High
WordPress Plugin Spotlight Social Feeds [Block, Shortcode, and Widget] Security Bypass (0.10.1)
-
CWE-862
High
WordPress Plugin Starter Templates-Elementor, WordPress & Beaver Builder Templates Cross-Site Request Forgery (3.1.20)
CVE-2022-46851
CWE-352
High
WordPress Plugin Structured Content (JSON-LD) #wpsc Cross-Site Scripting (1.5)
CVE-2022-4715
CWE-79
High
WordPress Plugin Survey Maker-Best WordPress Survey Cross-Site Scripting (2.0.6)
CVE-2021-26256
CWE-79
High
WordPress Plugin Survey Maker-Best WordPress Survey Cross-Site Scripting (3.1.3)
CVE-2023-0038
CWE-79
High
WordPress Plugin Survey Maker-Best WordPress Survey SQL Injection (3.1.1)
CVE-2023-23490
CWE-89
High
WordPress Plugin Survey Maker-Best WordPress Survey Unspecified Vulnerability (3.2.0)
-
-
High
WordPress Plugin TemplatesNext ToolKit Cross-Site Scripting (3.2.8)
CVE-2023-0333
CWE-79
High
WordPress Plugin TemplatesNext ToolKit Cross-Site Scripting (3.2.7)
CVE-2022-4678
CWE-79
High
WordPress Plugin The Post Grid-Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Cross-Site Request Forgery (5.0.4)
CVE-2022-46853
CWE-352
High
WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.2.0)
CVE-2022-4464
CWE-79
High
WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.1.6)
CVE-2022-0200
CWE-79
High