Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13355 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Yoast SEO Cross-Site Scripting (22.6)
CVE-2024-4984
CWE-79
High
WordPress Plugin Yoast SEO Cross-Site Scripting (21.0)
CVE-2023-40680
CWE-79
High
WordPress Plugin 10Web AI Assistant-AI content writing assistant Security Bypass (1.0.18)
CVE-2023-6985
CWE-862
High
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Information Disclosure (1.9.25)
CVE-2024-35171
CWE-200
High
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Multiple Security Bypass Vulnerabilities (1.9.16)
CVE-2024-33912
CWE-862
High
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Privilege Escalation (1.9.19)
CVE-2024-1505
CWE-269
High
WordPress Plugin Ad Invalid Click Protector (AICP) Malicious Code (1.2.9)
CVE-2024-6297
CWE-506
High
WordPress Plugin AliExpress Dropshipping with AliNext Lite Cross-Site Request Forgery (3.3.5)
CVE-2024-37212
CWE-352
High
WordPress Plugin AppPresser-Mobile App Framework Security Bypass (4.3.2)
CVE-2024-4611
CWE-287
High
WordPress Plugin AppPresser-Mobile App Framework Security Bypass (4.3.0)
CVE-2024-32776
CWE-862
High
WordPress Plugin BLAZE Retail Widget Malicious Code (2.5.2)
CVE-2024-6297
CWE-506
High
WordPress Plugin BuddyPress Cover Arbitrary File Upload (2.1.4.2)
CVE-2024-35746
CWE-434
High
WordPress Plugin Checkout Field Editor for WooCommerce (Pro) Arbitrary File Deletion (3.6.2)
CVE-2024-35658
CWE-73
High
WordPress Plugin Consulting Elementor Widgets Local File Inclusion (1.3.0)
CVE-2024-37089
CWE-22
High
WordPress Plugin Consulting Elementor Widgets SQL Injection (1.3.0)
CVE-2024-37090
CWE-89
High
WordPress Plugin Contact Form 7 Multi-Step Addon Malicious Code (1.0.5)
CVE-2024-6297
CWE-506
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.2)
CVE-2024-35678
CWE-89
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.0)
CVE-2023-29096
CWE-89
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.1)
CVE-2023-36508
CWE-89
High
WordPress Plugin Content Blocks (Custom Post Widget) Local File Inclusion (3.3.0)
CVE-2024-3564
CWE-22
High
WordPress Plugin Cookie Information-Free GDPR Consent Solution Security Bypass (2.0.22)
CVE-2023-6700
CWE-862
High
WordPress Plugin Country State City Dropdown CF7 Security Bypass (2.7.1)
CVE-2024-3520
CWE-862
High
WordPress Plugin Country State City Dropdown CF7 SQL Injection (2.7.2)
CVE-2024-3495
CWE-89
High
WordPress Plugin Easy Digital Downloads-Recent Purchases Remote File Inclusion (1.0.2)
CVE-2024-35629
CWE-98
High
WordPress Plugin Elements For Elementor Local File Inclusion (2.1)
CVE-2024-5348
CWE-22
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.20)
CVE-2024-4295
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.23)
CVE-2024-5756
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.22)
CVE-2024-4845
CWE-89
High
WordPress Plugin File Manager Pro Arbitrary File Upload (8.3.4)
CVE-2023-6846
CWE-434
High
WordPress Plugin Gallery-Image and Video Gallery with Thumbnails SQL Injection (2.0.3)
CVE-2024-35750
CWE-89
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block Cross-Site Scripting (2.5.18)
CVE-2023-6485
CWE-79
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.26)
CVE-2024-5522
CWE-89
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.24)
CVE-2024-1061
CWE-89
High
WordPress Plugin Image Optimizer, Resizer and CDN-Sirv Arbitrary File Upload (7.2.6)
CVE-2024-5853
CWE-434
High
WordPress Plugin Insert or Embed Articulate Content into WordPress Arbitrary File Upload (4.3000000023)
CVE-2024-0757
CWE-434
High
WordPress Plugin InstaWP Connect-1-click WP Staging & Migration Arbitrary File Upload (0.1.0.22)
CVE-2024-2667
CWE-434
High
WordPress Plugin InstaWP Connect-1-click WP Staging & Migration Arbitrary File Upload (0.1.0.38)
CVE-2024-37228
CWE-434
High
WordPress Plugin InstaWP Connect-1-click WP Staging & Migration Security Bypass (0.1.0.38)
CVE-2024-4898
CWE-862
High
WordPress Plugin InstaWP Connect-1-click WP Staging & Migration Security Bypass (0.1.0.8)
CVE-2024-22145
CWE-862
High
WordPress Plugin InstaWP Connect-1-click WP Staging & Migration Security Bypass (0.1.0.24)
CVE-2024-32701
CWE-862
High
WordPress Plugin Lifeline Donation Security Bypass (1.2.6)
CVE-2024-5432
CWE-287
High
WordPress Plugin LifterLMS-WP LMS for eLearning, Online Courses, & Quizzes SQL Injection (7.6.2)
CVE-2024-4743
CWE-89
High
WordPress Plugin Login/Signup Popup (Inline Form + Woocommerce) Security Bypass (2.7.2)
CVE-2024-5324
CWE-862
High
WordPress Plugin Login with phone number Security Bypass (1.7.26)
CVE-2024-5150
CWE-287
High
WordPress Plugin Mailster-Email Newsletter for WordPress Local File Inclusion (4.0.6)
CVE-2024-32523
CWE-22
High
WordPress Plugin MW WP Form Arbitrary File Deletion (5.0.3)
CVE-2023-6559
CWE-73
High
WordPress Plugin MW WP Form Cross-Site Scripting (5.0.6)
CVE-2024-24804
CWE-79
High
WordPress Plugin NextMove Lite-Thank You Page for WooCommerce Cross-Site Request Forgery (2.18.1)
CVE-2024-32104
CWE-352
High
WordPress Plugin NextMove Lite-Thank You Page for WooCommerce Security Bypass (2.17.0)
CVE-2024-25092
CWE-862
High
WordPress Plugin NotificationX-WooCommerce Sales Notification Popup, Custom & Live Sales Notification, FOMO, Social Proof, Announcement Banner & Sticky Notification Bar SQL Injection (2.8.2)
CVE-2024-1698
CWE-89
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Cross-Site Scripting (4.2.2)
CVE-2023-6000
CWE-79
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Cross-Site Scripting (4.2.6)
CVE-2024-30184
CWE-79
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Cross-Site Scripting (4.2.7)
CVE-2024-2506
CWE-79
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Security Bypass (4.3.0)
-
CWE-862
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Server-Side Request Forgery (4.2.5)
CVE-2023-6294
CWE-918
High
WordPress Plugin Post Grid Gutenberg Blocks and WordPress Blog-PostX Security Bypass (4.1.2)
CVE-2024-5326
CWE-862
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.7.0)
CVE-2023-5958
CWE-79
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.8.6)
CVE-2023-6629
CWE-79
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.8.7)
CVE-2023-7027
CWE-79
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Security Bypass (2.8.7)
CVE-2023-6875
CWE-862
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark SQL Injection (2.8.6)
CVE-2023-6620
CWE-89
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark SQL Injection (2.9.3)
CVE-2024-5207
CWE-89
High
WordPress Plugin PowerPress Podcasting by Blubrry Malicious Code (11.9.4)
CVE-2024-6297
CWE-506
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker SQL Injection (9.0.1)
CVE-2024-3592
CWE-89
High
WordPress Plugin Responsive Owl Carousel for Elementor Local File Inclusion (1.2.0)
CVE-2024-5345
CWE-22
High
WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Security Bypass (4.4.2)
CVE-2024-1318
CWE-862
High
WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Server-Side Request Forgery (4.4.7)
CVE-2023-6805
CWE-918
High
WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator SQL Injection (4.4.2)
CVE-2024-1317
CWE-89
High
WordPress Plugin Salon Booking System Arbitrary File Upload (10.2)
CVE-2024-3229
CWE-434
High
WordPress Plugin Seo Optimized Images Malicious Code (2.1.2)
CVE-2024-6297
CWE-506
High
WordPress Plugin Shariff Wrapper Local File Inclusion (4.6.13)
CVE-2024-4098
CWE-22
High
WordPress Plugin Shield Security-Smart Bot Blocking & Intrusion Prevention Security Cross-Site Request Forgery (19.1.10)
CVE-2024-4344
CWE-352
High
WordPress Plugin Shield Security-Smart Bot Blocking & Intrusion Prevention Security Cross-Site Scripting (18.5.7)
CVE-2024-22163
CWE-79
High
WordPress Plugin Shield Security-Smart Bot Blocking & Intrusion Prevention Security Local File Inclusion (18.5.9)
CVE-2023-6989
CWE-22
High
WordPress Plugin Shortcode Addons-with Visual Composer, Divi, Beaver Builder and Elementor Extension Arbitrary File Upload (3.2.5)
CVE-2024-31114
CWE-434
High