Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Calendar Event Multi View Security Bypass (1.4.13)
CVE-2023-23814
CWE-287
High
WordPress Plugin Campaign URL Builder Cross-Site Scripting (1.8.1)
CVE-2023-0538
CWE-79
High
WordPress Plugin Cart All In One For WooCommerce Cross-Site Request Forgery (1.1.10)
CVE-2022-46806
CWE-352
High
WordPress Plugin Circles Gallery Cross-Site Scripting (1.0.10)
CVE-2023-23881
CWE-79
High
WordPress Plugin Click to Call or Chat Buttons Cross-Site Scripting (1.4.0)
CVE-2023-25710
CWE-79
High
WordPress Plugin Clio Grow Cross-Site Scripting (1.0)
CVE-2023-22683
CWE-79
High
WordPress Plugin Community by PeepSo-Social Network, Membership, Registration, User Profiles Multiple Cross-Site Request Forgery Vulnerabilities (6.0.2.0)
CVE-2023-25967
CWE-352
High
WordPress Plugin Complianz-GDPR/CCPA Cookie Consent Cross-Site Scripting (6.4.1)
CVE-2023-1069
CWE-79
High
WordPress Plugin Complianz-GDPR/CCPA Cookie Consent Cross-Site Scripting (5.5.2)
CVE-2022-0193
CWE-79
High
WordPress Plugin Complianz-GDPR/CCPA Cookie Consent SQL Injection (6.3.3)
CVE-2022-3494
CWE-89
High
WordPress Plugin Conditional Payments for WooCommerce Cross-Site Request Forgery (2.3.1)
CVE-2022-46805
CWE-352
High
WordPress Plugin Contact Form X Cross-Site Scripting (2.4)
CVE-2022-25601
CWE-79
High
WordPress Plugin CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce Cross-Site Request Forgery (2.4.49)
CVE-2022-47154
CWE-352
High
WordPress Plugin Easy Google Analytics for WordPress Cross-Site Request Forgery (1.6.0)
CVE-2023-23887
CWE-352
High
WordPress Plugin Easy Panorama Cross-Site Scripting (1.1.4)
CVE-2023-23799
CWE-79
High
WordPress Plugin Embed Any Document-Embed PDF, Word, PowerPoint and Excel Files Cross-Site Scripting (2.7.1)
CVE-2023-23707
CWE-79
High
WordPress Plugin Exquisite PayPal Donation Cross-Site Scripting (2.0.0)
CVE-2023-23785
CWE-79
High
WordPress Plugin External Links-nofollow, noopener & new window Cross-Site Request Forgery (2.57)
-
CWE-352
High
WordPress Plugin External Links-nofollow, noopener & new window Cross-Site Scripting (2.55)
-
CWE-79
High
WordPress Plugin Eyes Only:User Access Shortcode Cross-Site Scripting (1.8.2)
CVE-2023-25786
CWE-79
High
WordPress Plugin Fancy Comments WordPress Cross-Site Scripting (1.2.10)
CVE-2023-23670
CWE-79
High
WordPress Plugin Feed Changer & Remover Cross-Site Scripting (0.2)
CVE-2023-25795
CWE-79
High
WordPress Plugin FireCask Like & Share Button Cross-Site Scripting (1.1.5)
CVE-2023-25783
CWE-79
High
WordPress Plugin Fontiran Multiple Vulnerabilities (2.1)
CVE-2023-25791
CWE-862
High
WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Cross-Site Request Forgery (5.5.6)
CVE-2023-24419
CWE-352
High
WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Multiple Vulnerabilities (5.5.4)
CVE-2022-45806
CWE-918
High
WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Security Bypass (6.0.1)
CVE-2023-0816
CWE-287
High
WordPress Plugin GamiPress-The most flexible and powerful gamification for WordPress Cross-Site Request Forgery (2.5.0)
-
CWE-352
High
WordPress Plugin GamiPress-The most flexible and powerful gamification for WordPress Multiple Vulnerabilities (2.5.6)
CVE-2023-25715
CWE-862
High
WordPress Plugin GamiPress-The most flexible and powerful gamification for WordPress SQL Injection (2.5.7)
CVE-2023-24000
CWE-89
High
WordPress Plugin Get URL Cron Multiple Vulnerabilities (1.4.7)
-
CWE-862
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Request Forgery (2.25.2)
-
CWE-352
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Multiple Cross-Site Scripting Vulnerabilities (2.17.2)
CVE-2022-0252
CWE-79
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Multiple Vulnerabilities (2.25.1)
CVE-2023-23672
CWE-1236
High
WordPress Plugin Google Analytics Opt-Out Cross-Site Scripting (2.3.4)
CVE-2023-25712
CWE-79
High
WordPress Plugin Google Maps v3 Shortcode Cross-Site Scripting (1.2.1)
CVE-2023-23827
CWE-79
High
WordPress Plugin Gutenberg Blocks by WordPress Download Manager Cross-Site Scripting (2.1.8)
CVE-2023-22713
CWE-79
High
WordPress Plugin Inline Tweet Sharer-Twitter Sharing Cross-Site Scripting (2.5.3)
CVE-2023-24005
CWE-79
High
WordPress Plugin Interactive Geo Maps Cross-Site Scripting (1.5.10)
CVE-2023-0731
CWE-79
High
WordPress Plugin Interactive Geo Maps Cross-Site Scripting (1.5.8)
CVE-2023-23866
CWE-79
High
WordPress Plugin Interactive SVG Image Map Builder Cross-Site Scripting (1.0)
CVE-2023-25704
CWE-79
High
WordPress Plugin JSON Content Importer Cross-Site Scripting (1.3.15)
CVE-2023-25485
CWE-79
High
WordPress Plugin Link Juice Keeper Cross-Site Scripting (2.0.2)
CVE-2023-25793
CWE-79
High
WordPress Plugin Locatoraid Store Locator Cross-Site Request Forgery (3.9.11)
CVE-2023-25709
CWE-352
High
WordPress Plugin Membership For WooCommerce-Add Simple Membership Plans, Recurring Revenue, Product Tags & Send Emails To Members with WooCommerce Membership Arbitrary File Upload (2.1.6)
CVE-2022-4395
CWE-434
High
WordPress Plugin Meta Slider and Carousel with Lightbox Cross-Site Request Forgery (1.6.2)
CVE-2023-25703
CWE-352
High
WordPress Plugin Multi Rating Multiple Vulnerabilities (5.0.5)
CVE-2022-47443
CWE-352
High
WordPress Plugin Multiple Page Generator-MPG Cross-Site Request Forgery (3.3.9)
CVE-2022-47143
CWE-352
High
WordPress Plugin My Tickets Cross-Site Request Forgery (1.9.10)
CVE-2022-47440
CWE-352
High
WordPress Plugin My Tickets Security Bypass (1.9.11)
CVE-2023-23988
CWE-284
High
WordPress Plugin Nooz Cross-Site Scripting (1.6.0)
CVE-2023-25794
CWE-79
High
WordPress Plugin OAuth Single Sign On-SSO (OAuth Client) Multiple Cross-Site Request Forgery Vulnerabilities (6.24.1)
CVE-2023-1093
CWE-352
High
WordPress Plugin OAuth Single Sign On-SSO (OAuth Client) Security Bypass (6.22.5)
CVE-2022-2133
CWE-287
High
WordPress Plugin PayGreen-Ancienne version Cross-Site Request Forgery (4.10.2)
CVE-2023-25986
CWE-352
High
WordPress Plugin Podlove Podcast Publisher Cross-Site Request Forgery (3.8.3)
CVE-2023-25472
CWE-352
High
WordPress Plugin Podlove Podcast Publisher Cross-Site Scripting (3.8.2)
CVE-2023-25046
CWE-79
High
WordPress Plugin Podlove Subscribe button Cross-Site Scripting (1.3.6)
-
CWE-79
High
WordPress Plugin Podlove Subscribe button Multiple Vulnerabilities (1.3.7)
CVE-2023-25481
CWE-352
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Cross-Site Request Forgery (1.18.0)
-
CWE-352
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Cross-Site Scripting (1.16.10)
CVE-2022-3690
CWE-79
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Cross-Site Scripting (1.16.4)
CVE-2022-1104
CWE-79
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Multiple Cross-Site Scripting Vulnerabilities (1.16.8)
CVE-2022-4381
CWE-79
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Multiple Vulnerabilities (1.17.1)
CVE-2022-47597
CWE-862
High
WordPress Plugin Portfolio Slideshow Cross-Site Scripting (1.13.0)
CVE-2023-23717
CWE-79
High
WordPress Plugin Portfolio-WordPress Portfolio Cross-Site Request Forgery (2.8.8)
-
CWE-352
High
WordPress Plugin Portfolio-WordPress Portfolio Cross-Site Scripting (2.8.10)
CVE-2023-23685
CWE-79
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Cross-Site Scripting (2.7.2)
CVE-2022-38971
CWE-79
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Cross-Site Scripting (2.6.9)
-
CWE-79
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions PHAR Deserialization (2.7.7)
CVE-2023-26326
CWE-502
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Security Bypass (2.6.2)
-
CWE-862
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions SQL Injection (2.2.7)
CVE-2018-21003
CWE-89
High
WordPress Plugin Product Reviews Import Export for WooCommerce CSV Injection (1.4.8)
CVE-2022-46802
CWE-1236
High
WordPress Plugin Protected Posts Logout Button Cross-Site Request Forgery (1.4.4)
-
CWE-352
High
WordPress Plugin Protected Posts Logout Button Security Bypass (1.4.5)
CVE-2023-25454
CWE-862
High
WordPress Plugin Publish to Schedule Cross-Site Request Forgery (4.4.2)
CVE-2023-25994
CWE-352
High