High Severity Vulnerabilities

Found 12791 vulnerabilities at High severity.

Vulnerability Name

CVE

CWE

Severity

WordPress Plugin Slimstat Analytics SQL Injection (4.9.3.2)

CVE-2023-0630

CWE-89

High

WordPress Plugin Dropbox Folder Share Local File Inclusion (1.9.7)

CVE-2023-4488

CWE-22

High

WordPress Plugin Dropbox Folder Share Server-Side Request Forgery (1.9.7)

CVE-2023-3025

CWE-918

High

WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (7.8.9)

CVE-2023-4772

CWE-79

High

WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions Unspecified Vulnerability (2.10.5)

-

-

High

WordPress Plugin Royal Elementor Addons and Templates Arbitrary File Upload (1.3.78)

CVE-2023-5360

CWE-434

High

WordPress Plugin AI ChatBot Arbitrary File Deletion (4.9.2)

CVE-2023-5212

CWE-73

High

WordPress Plugin AI ChatBot Cross-Site Scripting (4.9.6)

CVE-2023-5606

CWE-79

High

WordPress Plugin AI ChatBot Directory Traversal (4.9.2)

CVE-2023-5241

CWE-22

High

WordPress Plugin AI ChatBot Information Disclosure (4.8.9)

CVE-2023-5254

CWE-200

High

WordPress Plugin AI ChatBot SQL Injection (4.8.9)

CVE-2023-5204

CWE-89

High

WordPress Plugin UserPro-Community and User Profile Multiple Cross-Site Request Forgery Vulnerabilities (5.1.0)

CVE-2023-2497

CWE-352

High

WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities (5.1.1)

CVE-2023-6008

CWE-862

High

WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities (5.1.4)

CVE-2023-6009

CWE-862

High

WordPress Plugin WP Fastest Cache SQL Injection (1.2.1)

CVE-2023-6063

CWE-89

High

WordPress Plugin Adifier System Multiple Vulnerabilities (3.1.3)

CVE-2023-49753

CWE-89

High

WordPress Plugin Backup Migration Arbitrary File Download (1.3.6)

CVE-2023-6266

CWE-200

High

WordPress Plugin Backup Migration Cross-Site Request Forgery (1.2.9)

-

CWE-352

High

WordPress Plugin Backup Migration Cross-Site Scripting (1.1.5)

CVE-2021-36884

CWE-79

High

WordPress Plugin Backup Migration Information Disclosure (1.3.5)

CVE-2023-6271

CWE-200

High

WordPress Plugin Backup Migration Information Disclosure (1.2.8)

-

CWE-200

High

WordPress Plugin Backup Migration Remote Code Execution (1.3.7)

CVE-2023-6553

CWE-94

High

WordPress Plugin Clone Information Disclosure (2.4.2)

CVE-2023-6750

CWE-200

High

WordPress Plugin Debug Log Manager Cross-Site Request Forgery (2.2.1)

CVE-2023-5772

CWE-352

High

WordPress Plugin Debug Log Manager Information Disclosure (2.2.2)

CVE-2023-6383

CWE-200

High

WordPress Plugin Debug Log Manager Security Bypass (2.2.1)

CVE-2023-6136

CWE-862

High

WordPress Plugin Deeper Comments Security Bypass (2.1.1)

-

CWE-862

High

WordPress Plugin Elementor Website Builder Arbitrary File Upload (3.18.1)

CVE-2023-48777

CWE-434

High

WordPress Plugin Elementor Website Builder Multiple Vulnerabilities (3.16.4)

CVE-2023-47505

CWE-862

High

WordPress Plugin JSM file_get_contents() Shortcode Server-Side Request Forgery (2.7.0)

CVE-2023-6991

CWE-918

High

WordPress Plugin MW WP Form Arbitrary File Upload (5.0.1)

CVE-2023-6316

CWE-434

High

WordPress Plugin MW WP Form Directory Traversal (4.4.2)

CVE-2023-28408

CWE-22

High

WordPress Plugin MW WP Form Security Bypass (4.4.5)

CVE-2023-46206

CWE-862

High

WordPress Plugin Shortcoder-Create Shortcodes for Anything Security Bypass (6.3)

CVE-2023-49849

CWE-862

High

WordPress Plugin Smart Forms-when you need more than just a contact form Security Bypass (2.6.70)

CVE-2022-0163

CWE-862

High

WordPress Plugin Smart Forms-when you need more than just a contact form Security Bypass (2.6.84)

CVE-2023-49856

CWE-862

High

WordPress Plugin Snow Monkey Forms Directory Traversal (5.1.1)

CVE-2023-28413

CWE-22

High

WordPress Plugin Symbiostock-Sell Photos Online For Free! Arbitrary File Upload (6.0.0)

CVE-2023-49814

CWE-434

High

WordPress Plugin WappPress-Create Mobile App for any WordPress site with our Mobile App Builder in just 1 minute Arbitrary File Upload (5.0.3)

CVE-2023-49815

CWE-434

High

WordPress Plugin Bricks Remote Code Execution (1.9.6)

CVE-2024-25600

CWE-94

High

WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Arbitrary File Upload (1.3.2)

CVE-2024-1069

CWE-434

High

WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.3.8)

CVE-2024-3715

CWE-79

High

WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.3.3)

CVE-2024-2030

CWE-79

High

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (5.7.11)

CVE-2024-22300

CWE-79

High

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (5.7.15)

CVE-2024-2656

CWE-79

High

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce CSV Injection (5.5.2)

CVE-2022-45810

CWE-1236

High

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Directory Traversal (5.6.23)

CVE-2023-5414

CWE-22

High

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.13)

CVE-2024-31352

CWE-862

High

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.19)

CVE-2024-4010

CWE-862

High

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.3.1)

CVE-2022-0439

CWE-89

High

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.4.19)

CVE-2022-3981

CWE-89

High

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.14)

CVE-2024-2876

CWE-89

High

WordPress Plugin File Manager Cross-Site Request Forgery (7.2.4)

CVE-2024-1538

CWE-352

High

WordPress Plugin File Manager Directory Traversal (7.2.5)

CVE-2024-2654

CWE-22

High

WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Arbitrary File Upload (1.28.1)

CVE-2024-28890

CWE-434

High

WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Scripting (1.29.2)

CVE-2024-3053

CWE-79

High

WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Scripting (1.29.0)

CVE-2024-29777

CWE-79

High

WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Multiple Vulnerabilities (1.29.3)

-

CWE-89

High

WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder SQL Injection (1.29.2)

CVE-2024-31077

CWE-89

High

WordPress Plugin LayerSlider SQL Injection (7.10.0)

CVE-2024-2879

CWE-89

High

WordPress Plugin LeadConnector Security Bypass (1.7)

CVE-2024-1371

CWE-862

High

WordPress Plugin LearnDash LMS Multiple Information Disclosure Vulnerabilities (4.10.2)

CVE-2024-1210

CWE-200

High

WordPress Plugin Malware Scanner Privilege Escalation (4.7.2)

CVE-2024-2172

CWE-269

High

WordPress Plugin Malware Scanner SQL Injection (4.7.2)

CVE-2024-25902

CWE-89

High

WordPress Plugin Malware Scanner Unspecified Vulnerability (4.7.3)

-

-

High

WordPress Plugin Management App for WooCommerce-Order notifications, Order management, Lead management, Uptime Monitoring Arbitrary File Upload (1.2.2)

CVE-2024-1205

CWE-434

High

WordPress Plugin Management App for WooCommerce-Order notifications, Order management, Lead management, Uptime Monitoring Unspecified Vulnerability (1.2.3)

-

-

High

WordPress Plugin MasterStudy LMS-for Online Courses and Education Information Disclosure (3.2.10)

CVE-2024-2106

CWE-200

High

WordPress Plugin MasterStudy LMS-for Online Courses and Education Local File Inclusion (3.3.3)

CVE-2024-3136

CWE-22

High

WordPress Plugin MasterStudy LMS-for Online Courses and Education Local File Inclusion (3.3.0)

CVE-2024-2411

CWE-22

High

WordPress Plugin MasterStudy LMS-for Online Courses and Education Privilege Escalation (3.3.1)

CVE-2024-2409

CWE-269

High

WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.2.13)

CVE-2024-1904

CWE-862

High

WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.3.8)

CVE-2024-3942

CWE-862

High

WordPress Plugin MasterStudy LMS-for Online Courses and Education SQL Injection (3.2.5)

CVE-2024-1512

CWE-89

High

WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Cross-Site Request Forgery (4.10.1)

CVE-2023-50878

CWE-352

High