Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Husker Portfolio Cross-Site Request Forgery (0.3)
-
CWE-352
High
WordPress Plugin ImmoPress Cross-Site Scripting (0.0.4)
-
CWE-79
High
WordPress Plugin IP Ban Cross-Site Request Forgery (1.2.3)
CVE-2014-9413
CWE-352
High
WordPress Plugin JS MultiHotel Cross-Site Scripting (2.2.1)
CVE-2013-7419
CWE-79
High
WordPress Plugin Keyring Cross-Site Scripting (1.5)
-
CWE-79
High
WordPress Plugin Keyword Strategy Internal Links Multiple Cross-Site Scripting Vulnerabilities (2.0)
CVE-2014-4537
CWE-79
High
WordPress Plugin Lightbox Photo Gallery Cross-Site Request Forgery (1.0)
CVE-2014-9441
CWE-352
High
WordPress Plugin Manage Calameo Publications by Athlon Cross-Site Scripting (1.1.0)
-
CWE-79
High
WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files Multiple Vulnerabilities (1.6.0)
-
CWE-79
High
WordPress Plugin Mikiurl WordPress Eklentisi Cross-Site Request Forgery (2.0)
CVE-2014-9337
CWE-352
High
WordPress Plugin MiniMax-Page Layout Builder Cross-Site Scripting (1.3.4)
-
CWE-79
High
WordPress Plugin MP3-jPlayer Multiple Cross-Site Scripting Vulnerabilities (1.8.11)
-
CWE-79
High
WordPress Plugin mywebcounter Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin O2Tweet Cross-Site Request Forgery (0.0.4)
CVE-2014-9338
CWE-352
High
WordPress Plugin Our Team Showcase Cross-Site Request Forgery (1.2)
CVE-2014-9523
CWE-352
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Arbitrary File Upload (1.2.5)
CVE-2014-9312
CWE-434
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Vulnerabilities (1.2.9)
CVE-2015-1394
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.2.7)
CVE-2015-1055
CWE-89
High
WordPress Plugin PhotoSmash Galleries Arbitrary File Upload (1.0.7)
-
CWE-434
High
WordPress Plugin PictoBrowser Cross-Site Request Forgery (0.3.1)
CVE-2014-9392
CWE-352
High
WordPress Plugin Pixabay Images Multiple Vulnerabilities (2.3)
CVE-2015-1376
CWE-592
High
WordPress Plugin Pods-Custom Content Types and Fields Multiple Vulnerabilities (2.4.3)
CVE-2014-7957
CWE-352
High
WordPress Plugin Post to Twitter Cross-Site Request Forgery (0.7)
CVE-2014-9393
CWE-352
High
WordPress Plugin PowerPress Podcasting by Blubrry Cross-Site Scripting (6.0)
CVE-2015-1385
CWE-79
High
WordPress Plugin PWG Random Cross-Site Request Forgery (1.11)
CVE-2014-9394
CWE-352
High
WordPress Plugin Recommend to a friend Cross-Site Scripting (2.0.2)
CVE-2013-7276
CWE-79
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Security Bypass (2.0.13)
CVE-2014-8802
CWE-264
High
WordPress Plugin Relevanssi-A Better Search Cross-Site Scripting (3.3.7.1)
CVE-2014-9443
CWE-79
High
WordPress Plugin Ruven Toolkit Cross-Site Scripting (1.1)
CVE-2014-4548
CWE-79
High
WordPress Plugin S3 Video Cross-Site Scripting (0.982)
CVE-2013-7279
CWE-79
High
WordPress Plugin SEO Friendly Images Cross-Site Scripting (3.0.4)
-
CWE-79
High
WordPress Plugin Shariff for WordPress Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin Shopping Cart & eCommerce Store Arbitrary File Upload (3.0.8)
CVE-2014-9308
CWE-434
High
WordPress Plugin Shopping Cart & eCommerce Store Information Disclosure (2.0.5)
CVE-2014-4942
CWE-200
High
WordPress Plugin Simple Security Multiple Cross-Site Scripting Vulnerabilities (1.1.5)
CVE-2014-9570
CWE-79
High
WordPress Plugin Simple Sticky Footer Cross-Site Request Forgery (1.3.2)
CVE-2014-9454
CWE-352
High
WordPress Plugin SimpleFlickr Cross-Site Request Forgery (3.0.3)
CVE-2014-9396
CWE-352
High
WordPress Plugin Simplelife Cross-Site Request Forgery (1.2)
CVE-2014-9395
CWE-352
High
WordPress Plugin Sliding Recent Posts Cross-Site Request Forgery (1.0)
-
CWE-352
High
WordPress Plugin Sliding Social Icons Cross-Site Request Forgery (1.61)
CVE-2014-9437
CWE-352
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (3.9.1)
CVE-2015-1204
CWE-79
High
WordPress Plugin Social Connect Cross-Site Scripting (1.0.4)
CVE-2014-4551
CWE-79
High
WordPress Plugin SPNbabble Cross-Site Request Forgery (1.4.1)
CVE-2014-9339
CWE-352
High
WordPress Plugin SS Downloads Multiple Cross-Site Scripting Vulnerabilities (1.4.4.1)
CVE-2014-4554
CWE-79
High
WordPress Plugin Timed Popup Cross-Site Request Forgery (1.3)
CVE-2014-9525
CWE-352
High
WordPress Plugin Tom M8te Directory Traversal (1.5.3)
CVE-2014-5187
CWE-22
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies PHP Object Injection (1.5.7)
-
CWE-915
High
WordPress Plugin TweetScribe Cross-Site Request Forgery (1.1)
CVE-2014-9399
CWE-352
High
WordPress Plugin Twitter LiveBlog Cross-Site Request Forgery (1.1.2)
CVE-2014-9398
CWE-352
High
WordPress Plugin twitterDash Cross-Site Request Forgery (2.1)
CVE-2014-9368
CWE-352
High
WordPress Plugin Verification Code for Comments Multiple Cross-Site Scripting Vulnerabilities (2.1.0)
CVE-2014-4565
CWE-79
High
WordPress Plugin Video Chat Multiple Cross-Site Scripting Vulnerabilities (1.4.1)
-
CWE-79
High
WordPress Plugin Video Comments Webcam Recorder Cross-Site Scripting (1.55)
CVE-2014-4567
CWE-79
High
WordPress Plugin Video Posts Webcam Recorder Cross-Site Scripting (1.55.4)
CVE-2014-4568
CWE-79
High
WordPress Plugin VN-Calendar Multiple Cross-Site Scripting Vulnerabilities (1.0)
CVE-2014-4571
CWE-79
High
WordPress Plugin W3 Total Cache Multiple Vulnerabilities (0.9.4)
CVE-2014-9414
CWE-352
High
WordPress Plugin Walk Score Multiple Cross-Site Scripting Vulnerabilities (0.5.5)
CVE-2014-4573
CWE-79
High
WordPress Plugin WikiPop Cross-Site Scripting (2.0)
CVE-2014-4575
CWE-79
High
WordPress Plugin WonderPlugin Audio Player Multiple Vulnerabilities (2.0)
CVE-2015-2218
CWE-89
High
WordPress Plugin WooCommerce Security Bypass (2.1.7)
-
CWE-264
High
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (3.8.6)
-
CWE-79
High
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (5.1.4)
CVE-2014-4932
CWE-79
High
WordPress Plugin Wordfence Security-Firewall & Malware Scan Multiple Vulnerabilities (5.2.4)
-
CWE-264
High
WordPress Plugin WordPress Button Plugin MaxButtons Security Bypass (1.19.0)
-
CWE-264
High
WordPress Plugin WordPress Connect Cross-Site Scripting (2.0.3)
-
CWE-79
High
WordPress Plugin WordPress Responsive Preview Cross-Site Scripting (1.1)
CVE-2014-4594
CWE-79
High
WordPress Plugin WordPress Social Ring (Facebook Like, Google +1, ReTweet, LinkedIn and Pin It) Cross-Site Scripting (1.1.9)
-
CWE-79
High
WordPress Plugin WordPress Video Player Cross-Site Scripting (1.5.1)
CVE-2014-8584
CWE-79
High
WordPress Plugin WP AmASIN-The Amazon Affiliate Shop Directory Traversal (0.9.6)
CVE-2014-4577
CWE-22
High
WordPress Plugin WP App Maker Cross-Site Scripting (1.0.16.4)
CVE-2014-4578
CWE-79
High
WordPress Plugin WP-BlipBot Cross-Site Scripting (3.0.9)
CVE-2014-4580
CWE-79
High
WordPress Plugin WP Construction Mode Cross-Site Request Forgery (1.91)
-
CWE-352
High
WordPress Plugin WP Consultant Cross-Site Scripting (1.0)
CVE-2014-4582
CWE-79
High
WordPress Plugin WP-Cron Dashboard Cross-Site Scripting (1.1.5)
CVE-2013-6991
CWE-79
High
WordPress Plugin WP eCommerce Multiple Vulnerabilities (3.8.9.5)
CVE-2012-3414
CWE-434
High