Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13053 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WappPress-Create Mobile App for any WordPress site with our Mobile App Builder in just 1 minute Arbitrary File Upload (5.0.3)
CVE-2023-49815
CWE-434
High
WordPress Plugin Bricks Remote Code Execution (1.9.6)
CVE-2024-25600
CWE-94
High
WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Arbitrary File Upload (1.3.2)
CVE-2024-1069
CWE-434
High
WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.3.8)
CVE-2024-3715
CWE-79
High
WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.3.3)
CVE-2024-2030
CWE-79
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (5.7.11)
CVE-2024-22300
CWE-79
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (5.7.15)
CVE-2024-2656
CWE-79
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce CSV Injection (5.5.2)
CVE-2022-45810
CWE-1236
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Directory Traversal (5.6.23)
CVE-2023-5414
CWE-22
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.13)
CVE-2024-31352
CWE-862
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.19)
CVE-2024-4010
CWE-862
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.3.1)
CVE-2022-0439
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.4.19)
CVE-2022-3981
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.14)
CVE-2024-2876
CWE-89
High
WordPress Plugin File Manager Cross-Site Request Forgery (7.2.4)
CVE-2024-1538
CWE-352
High
WordPress Plugin File Manager Directory Traversal (7.2.5)
CVE-2024-2654
CWE-22
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Arbitrary File Upload (1.28.1)
CVE-2024-28890
CWE-434
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Scripting (1.29.2)
CVE-2024-3053
CWE-79
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Scripting (1.29.0)
CVE-2024-29777
CWE-79
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Multiple Vulnerabilities (1.29.3)
-
CWE-89
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder SQL Injection (1.29.2)
CVE-2024-31077
CWE-89
High
WordPress Plugin LayerSlider SQL Injection (7.10.0)
CVE-2024-2879
CWE-89
High
WordPress Plugin LeadConnector Security Bypass (1.7)
CVE-2024-1371
CWE-862
High
WordPress Plugin LearnDash LMS Multiple Information Disclosure Vulnerabilities (4.10.2)
CVE-2024-1210
CWE-200
High
WordPress Plugin Malware Scanner Privilege Escalation (4.7.2)
CVE-2024-2172
CWE-269
High
WordPress Plugin Malware Scanner SQL Injection (4.7.2)
CVE-2024-25902
CWE-89
High
WordPress Plugin Malware Scanner Unspecified Vulnerability (4.7.3)
-
-
High
WordPress Plugin Management App for WooCommerce-Order notifications, Order management, Lead management, Uptime Monitoring Arbitrary File Upload (1.2.2)
CVE-2024-1205
CWE-434
High
WordPress Plugin Management App for WooCommerce-Order notifications, Order management, Lead management, Uptime Monitoring Unspecified Vulnerability (1.2.3)
-
-
High
WordPress Plugin MasterStudy LMS-for Online Courses and Education Information Disclosure (3.2.10)
CVE-2024-2106
CWE-200
High
WordPress Plugin MasterStudy LMS-for Online Courses and Education Local File Inclusion (3.3.3)
CVE-2024-3136
CWE-22
High
WordPress Plugin MasterStudy LMS-for Online Courses and Education Local File Inclusion (3.3.0)
CVE-2024-2411
CWE-22
High
WordPress Plugin MasterStudy LMS-for Online Courses and Education Privilege Escalation (3.3.1)
CVE-2024-2409
CWE-269
High
WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.2.13)
CVE-2024-1904
CWE-862
High
WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.3.8)
CVE-2024-3942
CWE-862
High
WordPress Plugin MasterStudy LMS-for Online Courses and Education SQL Injection (3.2.5)
CVE-2024-1512
CWE-89
High
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Cross-Site Request Forgery (4.10.1)
CVE-2023-50878
CWE-352
High
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (3.9.2)
CVE-2023-2732
CWE-287
High
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (4.10.7)
CVE-2023-3277
CWE-287
High
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud SQL Injection (4.10.8)
-
CWE-89
High
WordPress Plugin Popup-Popup More Popups Directory Traversal (2.2.4)
CVE-2024-0844
CWE-22
High
WordPress Plugin Premmerce Permalink Manager for WooCommerce Local File Inclusion (2.3.10)
CVE-2024-27971
CWE-22
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Cross-Site Request Forgery (5.3.0.0)
CVE-2024-2951
CWE-352
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Cross-Site Request Forgery (5.2.5.9)
CVE-2024-25935
CWE-352
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Cross-Site Scripting (5.2.5.9)
CVE-2024-29113
CWE-79
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Cross-Site Scripting (5.3.2.0)
CVE-2024-33947
CWE-79
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Privilege Escalation (5.3.0.0)
CVE-2024-1991
CWE-269
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms SQL Injection (5.3.1.0)
CVE-2024-1990
CWE-89
High
WordPress Plugin Tablesome-Responsive Table, Woocommerce Automation, Email Log, Form Automation-Contact Form 7, Elementor, WPForms, Forminator Cross-Site Request Forgery (1.0.25)
CVE-2024-31388
CWE-352
High
WordPress Plugin Tablesome-Responsive Table, Woocommerce Automation, Email Log, Form Automation-Contact Form 7, Elementor, WPForms, Forminator Cross-Site Scripting (1.0.27)
CVE-2024-29110
CWE-79
High
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Request Forgery (2.6.1)
CVE-2024-1503
CWE-352
High
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (2.6.2)
CVE-2024-3994
CWE-79
High
WordPress Plugin Tutor LMS-eLearning and online course solution Insecure Direct Object Reference (2.7.0)
CVE-2024-4279
CWE-639
High
WordPress Plugin Tutor LMS-eLearning and online course solution Security Bypass (2.6.1)
CVE-2024-1502
CWE-862
High
WordPress Plugin Tutor LMS-eLearning and online course solution Security Bypass (2.7.0)
CVE-2024-4223
CWE-862
High
WordPress Plugin Tutor LMS-eLearning and online course solution Security Bypass (2.6.2)
CVE-2024-3553
CWE-862
High
WordPress Plugin Tutor LMS-eLearning and online course solution SQL Injection (2.6.1)
CVE-2024-1751
CWE-89
High
WordPress Plugin Tutor LMS-eLearning and online course solution SQL Injection (2.7.0)
CVE-2024-4318
CWE-89
High
WordPress Plugin Tutor LMS Elementor Addons Cross-Site Scripting (2.1.3)
CVE-2024-29913
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.8.4)
CVE-2024-2765
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.8.3)
CVE-2024-2123
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership SQL Injection (2.8.2)
CVE-2024-1071
CWE-89
High
WordPress Plugin User Registration-Custom Registration Form, Login Form, and User Profile Privilege Escalation (3.1.5)
CVE-2024-2417
CWE-269
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Security Bypass (3.10.15)
CVE-2024-3750
CWE-862
High
WordPress Plugin Web Application Firewall-website security Privilege Escalation (2.1.1)
CVE-2024-2172
CWE-269
High
WordPress Plugin Web Application Firewall-website security Unspecified Vulnerability (2.1.2)
-
-
High
WordPress Plugin WordPress Automatic SQL Injection (3.92.0)
CVE-2024-27956
CWE-89
High
WordPress Plugin WP Activity Log Premium SQL Injection (4.6.4)
CVE-2024-2018
CWE-89
High
WordPress Plugin WP Datepicker Security Bypass (2.1.0)
CVE-2024-3895
CWE-862
High
WordPress Plugin WP-Members Membership Cross-Site Scripting (3.4.9.2)
CVE-2024-1852
CWE-79
High
WordPress Plugin WP Poll Maker-Best WordPress Poll for Voting Contest Arbitrary File Upload (3.4)
CVE-2024-32514
CWE-434
High
WordPress Plugin Yoast SEO Cross-Site Scripting (20.2)
-
CWE-79
High
WordPress Plugin Yoast SEO Cross-Site Scripting (22.5)
CVE-2024-4041
CWE-79
High
WordPress Plugin Yoast SEO Cross-Site Scripting (22.6)
CVE-2024-4984
CWE-79
High
WordPress Plugin Yoast SEO Cross-Site Scripting (21.0)
CVE-2023-40680
CWE-79
High