Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12791 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (3.6.7)
CVE-2022-0884
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Information Disclosure (3.9.0)
CVE-2023-0814
CWE-200
High
WordPress Plugin Quick Event Manager Multiple Vulnerabilities (9.7.4)
CVE-2023-23979
CWE-862
High
WordPress Plugin Quick Restaurant Menu Multiple Vulnerabilities (2.0.2)
CVE-2023-0555
CWE-639
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Request Forgery (8.0.7)
CVE-2022-46862
CWE-352
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple Vulnerabilities (8.0.4)
CVE-2022-4033
CWE-80
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple Vulnerabilities (7.3.10)
CVE-2022-42883
CWE-862
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple Vulnerabilities (8.0.8)
CVE-2023-0292
CWE-862
High
WordPress Plugin Rate my Post-WP Rating System Cross-Site Scripting (3.3.8)
CVE-2022-4673
CWE-79
High
WordPress Plugin Rate my Post-WP Rating System Multiple Vulnerabilities (3.3.4)
CVE-2022-40671
CWE-362
High
WordPress Plugin Real Media Library:Media Library Folder & File Manager Cross-Site Scripting (4.18.28)
CVE-2023-0285
CWE-79
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Open Redirect (3.8.2.2)
CVE-2023-0552
CWE-601
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Security Bypass (3.8.1.2)
CVE-2022-4024
CWE-862
High
WordPress Plugin Responsive Gallery Grid Cross-Site Scripting (2.3.8)
CVE-2023-0060
CWE-79
High
WordPress Plugin Rich Table of Contents Cross-Site Scripting (1.3.7)
CVE-2022-4551
CWE-79
High
WordPress Plugin ShiftNav-Responsive Mobile Menu Cross-Site Scripting (1.7.1)
CVE-2022-4627
CWE-79
High
WordPress Plugin ShopLentor-WooCommerce Builder for Elementor & Gutenberg +10 Modules-All in One Solution (formerly WooLentor) Multiple Vulnerabilities (2.5.3)
CVE-2023-0232
CWE-915
High
WordPress Plugin Shortcode for Font Awesome Cross-Site Scripting (1.4)
CVE-2023-0419
CWE-79
High
WordPress Plugin ShortPixel Adaptive Images-WebP, AVIF, CDN, Image Optimization Cross-Site Scripting (3.6.2)
CVE-2023-0334
CWE-79
High
WordPress Plugin Show-Hide/Collapse-Expand Cross-Site Scripting (1.2.5)
CVE-2022-4829
CWE-79
High
WordPress Plugin Simple File Downloader Cross-Site Scripting (1.0.4)
CVE-2022-4764
CWE-79
High
WordPress Plugin Simple URLs-Link Cloaking, Product Displays, and Affiliate Link Management Multiple Vulnerabilities (114)
CVE-2023-0099
CWE-89
High
WordPress Plugin Social Like Box and Page by WpDevArt Cross-Site Scripting (0.8.40)
CVE-2023-0177
CWE-79
High
WordPress Plugin Social Like Box and Page by WpDevArt Unspecified Vulnerability (0.8.39)
-
-
High
WordPress Plugin Social Sharing Toolkit Cross-Site Scripting (2.6)
CVE-2022-4835
CWE-79
High
WordPress Plugin Spectra-WordPress Gutenberg Blocks Cross-Site Scripting (1.14.11)
CVE-2020-36656
CWE-79
High
WordPress Plugin Spectra-WordPress Gutenberg Blocks Cross-Site Scripting (1.25.5)
-
CWE-79
High
WordPress Plugin Spectra-WordPress Gutenberg Blocks Multiple Security Bypass Vulnerabilities (2.3.0)
CVE-2023-23834
CWE-284
High
WordPress Plugin Spotlight Social Feeds [Block, Shortcode, and Widget] Cross-Site Scripting (1.4.2)
CVE-2023-0379
CWE-79
High
WordPress Plugin Spotlight Social Feeds [Block, Shortcode, and Widget] Security Bypass (0.10.1)
-
CWE-862
High
WordPress Plugin Starter Templates-Elementor, WordPress & Beaver Builder Templates Cross-Site Request Forgery (3.1.20)
CVE-2022-46851
CWE-352
High
WordPress Plugin Structured Content (JSON-LD) #wpsc Cross-Site Scripting (1.5)
CVE-2022-4715
CWE-79
High
WordPress Plugin Survey Maker-Best WordPress Survey Cross-Site Scripting (2.0.6)
CVE-2021-26256
CWE-79
High
WordPress Plugin Survey Maker-Best WordPress Survey Cross-Site Scripting (3.1.3)
CVE-2023-0038
CWE-79
High
WordPress Plugin Survey Maker-Best WordPress Survey SQL Injection (3.1.1)
CVE-2023-23490
CWE-89
High
WordPress Plugin Survey Maker-Best WordPress Survey Unspecified Vulnerability (3.2.0)
-
-
High
WordPress Plugin TemplatesNext ToolKit Cross-Site Scripting (3.2.8)
CVE-2023-0333
CWE-79
High
WordPress Plugin TemplatesNext ToolKit Cross-Site Scripting (3.2.7)
CVE-2022-4678
CWE-79
High
WordPress Plugin The Post Grid-Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Cross-Site Request Forgery (5.0.4)
CVE-2022-46853
CWE-352
High
WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.2.0)
CVE-2022-4464
CWE-79
High
WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.1.6)
CVE-2022-0200
CWE-79
High
WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.2.1)
CVE-2023-0362
CWE-79
High
WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.1.9)
-
CWE-79
High
WordPress Plugin Timed Content Cross-Site Scripting (2.72)
CVE-2023-0067
CWE-79
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Scripting (3.2.2)
CVE-2022-4570
CWE-79
High
WordPress Plugin Transposh WordPress Translation Multiple Cross-Site Scripting Vulnerabilities (1.0.7)
CVE-2021-24911
CWE-79
High
WordPress Plugin Twenty20 Image Before-After Cross-Site Scripting (1.5.9)
CVE-2022-4580
CWE-79
High
WordPress Plugin User Activity Security Bypass (1.0.1)
CVE-2022-4550
CWE-290
High
WordPress Plugin User Verification Security Bypass (1.0.93)
CVE-2022-4693
CWE-287
High
WordPress Plugin uTubeVideo Gallery Cross-Site Scripting (2.0.7)
CVE-2023-0151
CWE-79
High
WordPress Plugin uTubeVideo Gallery Unspecified Vulnerability (2.0.6)
-
-
High
WordPress Plugin uTubeVideo Gallery Unspecified Vulnerability (2.0.4)
-
-
High
WordPress Plugin Video Conferencing with Zoom Cross-Site Scripting (4.0.9)
CVE-2022-4578
CWE-79
High
WordPress Plugin Video Conferencing with Zoom Cross-Site Scripting (3.9.2)
-
CWE-79
High
WordPress Plugin Video Conferencing with Zoom Cross-Site Scripting (3.8.15)
-
CWE-79
High
WordPress Plugin Video Conferencing with Zoom Information Disclosure (3.8.16)
CVE-2022-0384
CWE-200
High
WordPress Plugin Video Sidebar Widgets Cross-Site Scripting (6.1)
CVE-2022-4785
CWE-79
High
WordPress Plugin Video.js-HTML5 Video Player for Wordpress Cross-Site Scripting (4.5.0)
CVE-2022-4786
CWE-79
High
WordPress Plugin VK All in One Expansion Unit Cross-Site Scripting (9.85.0.1)
CVE-2023-0230
CWE-79
High
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.8.1)
CVE-2023-0428
CWE-79
High
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.8.2)
CVE-2023-0429
CWE-79
High
WordPress Plugin Widget Shortcode Cross-Site Scripting (0.3.5)
CVE-2022-4473
CWE-79
High
WordPress Plugin Widgets on Pages Cross-Site Scripting (1.6.0)
CVE-2022-4488
CWE-79
High
WordPress Plugin Word Balloon Cross-Site Scripting (4.19.2)
CVE-2022-4751
CWE-79
High
WordPress Plugin WordPress Gallery-NextGEN Gallery Cross-Site Request Forgery (3.28)
CVE-2022-38468
CWE-352
High
WordPress Plugin WordPress Simple Shopping Cart Cross-Site Scripting (4.6.1)
CVE-2022-4672
CWE-79
High
WordPress Plugin WP Airbnb Review Slider SQL Injection (3.2)
CVE-2023-0262
CWE-89
High
WordPress Plugin WP Customer Area Cross-Site Request Forgery (8.1.3)
CVE-2022-4745
CWE-352
High
WordPress Plugin WP Dark Mode-Best Dark Mode & Social Sharing for WordPress Cross-Site Scripting (3.0.6)
CVE-2022-4714
CWE-79
High
WordPress Plugin WP Font Awesome Cross-Site Scripting (1.7.8)
CVE-2023-0271
CWE-79
High
WordPress Plugin WP FullCalendar Security Bypass (1.4.1)
CVE-2022-3891
CWE-639
High
WordPress Plugin WP Google Review Slider Cross-Site Scripting (11.5)
CVE-2022-4242
CWE-79
High
WordPress Plugin WP Google Review Slider SQL Injection (11.7)
CVE-2023-0259
CWE-89
High
WordPress Plugin WP Helper Premium Cross-Site Scripting (4.2)
CVE-2023-0448
CWE-79
High
WordPress Plugin WP Limit Login Attempts Security Bypass (2.6.4)
CVE-2022-4303
CWE-693
High