Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13071 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Download Monitor Information Disclosure (1.6.3)
-
CWE-538
High
WordPress Plugin Download Shortcode Arbitrary File Disclosure (0.1)
-
CWE-22
High
WordPress Plugin Dropdown Menu Widget Cross-Site Request Forgery (1.9.1)
CVE-2013-2704
CWE-352
High
WordPress Plugin DVS Custom Notification Multiple Cross-Site Request Forgery Vulnerabilities (1.0.1)
CVE-2012-4921
CWE-352
High
WordPress Plugin DX-Contribute Cross-Site Request Forgery (1.2.0)
-
CWE-352
High
WordPress Plugin Easy Coming Soon Cross-Site Scripting (1.6.2)
-
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Multiple Security Bypass Vulnerabilities (2.1.10)
-
CWE-264
High
WordPress Plugin Easy Plugin for AdSense Cross-Site Request Forgery (6.06)
CVE-2013-2702
CWE-352
High
WordPress Plugin Editorial Calendar Multiple Vulnerabilities (2.6)
-
CWE-264
High
WordPress Plugin EELV Newsletter Cross-Site Scripting (3.3.0)
-
CWE-79
High
WordPress Plugin Eshop Magic Arbitrary File Disclosure (0.1)
-
CWE-22
High
WordPress Plugin Facebook Members Cross-Site Request Forgery (5.0.4)
CVE-2013-2703
CWE-352
High
WordPress Plugin Featured Post with thumbnail Unspecified Vulnerability (1.4)
-
-
High
WordPress Plugin File Uploader Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin FireStats Arbitrary File Download (1.6.5)
-
CWE-538
High
WordPress Plugin FireStats Cross-Site Scripting (1.6.4)
-
CWE-79
High
WordPress Plugin Flexible Custom Post Type Cross-Site Scripting (0.1.5)
CVE-2011-5106
CWE-79
High
WordPress Plugin Floating Tweets Multiple Vulnerabilities (1.0.1)
-
CWE-79
High
WordPress Plugin Form Builder Cross-Site Scripting (1.2.0)
-
CWE-79
High
WordPress Plugin FormGet Contact Form Cross-Site Scripting (5.3)
-
CWE-79
High
WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Multiple Unspecified Vulnerabilities (1.06.08)
-
-
High
WordPress Plugin ForumConverter SQL Injection (1.11)
-
CWE-89
High
WordPress Plugin FourSquare Checkins Cross-Site Request Forgery (1.2)
CVE-2013-2709
CWE-352
High
WordPress Plugin FunCaptcha-Anti-Spam CAPTCHA Cross-Site Request Forgery (0.3.2)
-
CWE-352
High
WordPress Plugin GA Universal Cross-Site Request Forgery (1.0)
-
CWE-352
High
WordPress Plugin Gallery by BestWebSoft Arbitrary File Disclosure (3.8.3)
-
CWE-538
High
WordPress Plugin Gallery-Flagallery Photo Portfolio Cross-Site Request Forgery (3.01)
-
CWE-352
High
WordPress Plugin Gallery-Flagallery Photo Portfolio Cross-Site Scripting (2.70)
CVE-2013-3261
CWE-79
High
WordPress Plugin Gallery-Flagallery Photo Portfolio SQL Injection (2.55)
-
CWE-89
High
WordPress Plugin Google Alert And Twitter Multiple Vulnerabilities (3.1.5)
-
CWE-89
High
WordPress Plugin Google Analytics Dashboard Plugin for WordPress by MonsterInsights Multiple Vulnerabilities (5.3.2)
-
CWE-264
High
WordPress Plugin Google XML Sitemaps Cross-Site Scripting (4.0.8)
-
CWE-79
High
WordPress Plugin Gravity Forms SQL Injection (1.9.3.5)
CVE-2015-2260
CWE-89
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Information Disclosure (3.6.74)
-
CWE-200
High
WordPress Plugin Import any XML or CSV File to WordPress Arbitrary File Upload (3.2.3)
-
CWE-434
High
WordPress Plugin Import any XML or CSV File to WordPress Multiple Vulnerabilities (3.2.4)
-
CWE-89
High
WordPress Plugin Import any XML or CSV File to WordPress Pro Arbitrary File Upload (4.1.0)
-
CWE-434
High
WordPress Plugin Import any XML or CSV File to WordPress Pro Multiple Vulnerabilities (4.1.1)
-
CWE-89
High
WordPress Plugin IP Blacklist Cloud Arbitrary File Disclosure (3.42)
-
CWE-22
High
WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (3.2.4)
CVE-2012-4263
CWE-79
High
WordPress Plugin Job Manager Multiple Cross-Site Scripting Vulnerabilities (0.7.18)
-
CWE-79
High
WordPress Plugin JS MultiHotel Multiple Vulnerabilities (2.2.1)
CVE-2014-100009
CWE-200
High
WordPress Plugin KBoard Multiple Vulnerabilities (3.3)
-
CWE-89
High
WordPress Plugin kk Star Ratings Security Bypass (2.3.1)
-
CWE-264
High
WordPress Plugin Knews Multilingual Newsletters Cross-Site Request Forgery (1.2.5)
-
CWE-352
High
WordPress Plugin Lazy SEO Arbitrary File Upload (1.3.2)
CVE-2013-5961
CWE-434
High
WordPress Plugin Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) Multiple Vulnerabilities (2.3)
-
CWE-89
High
WordPress Plugin Let Them Unsubscribe Multiple Unspecified Vulnerabilities (1.0)
-
-
High
WordPress Plugin Live Forms-Visual Form Builder SQL Injection (3.0.1)
-
CWE-89
High
WordPress Plugin Login With Ajax Cross-Site Request Forgery (3.0.4.1)
CVE-2013-2707
CWE-352
High
WordPress Plugin MAC PHOTO GALLERY Multiple Security Bypass Vulnerabilities (3.0)
-
CWE-285
High
WordPress Plugin MailChimp List Subscribe Form Multiple Unspecified Vulnerabilities (1.1)
-
-
High
WordPress Plugin MailUp newsletter sign-up form Security Bypass (1.3.2)
CVE-2013-2640
CWE-264
High
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Security Bypass (2.0.9.1)
-
CWE-264
High
WordPress Plugin MaxBlogPress Max Banner Ads Cross-Site Scripting (1.9)
-
CWE-79
High
WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files Multiple Cross-Site Scripting Vulnerabilities (1.3.8)
-
CWE-79
High
WordPress Plugin mb.YTPlayer for background videos Unspecified Vulnerability (1.7.2)
-
-
High
WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (2.2.7)
-
CWE-79
High
WordPress Plugin Mingle Forum Multiple Cross-Site Request Forgery Vulnerabilities (1.0.34)
CVE-2013-0736
CWE-352
High
WordPress Plugin Mingle Forum Multiple Vulnerabilities (1.0.33.3)
CVE-2013-0735
CWE-89
High
WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Disclosure (1.0.4)
-
CWE-538
High
WordPress Plugin Monsters Editor for WP Super Edit Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin MoodThingy Mood Rating Widget SQL Injection (0.9.1)
-
CWE-89
High
WordPress Plugin MukioPlayer SQL Injection (1.6)
-
CWE-89
High
WordPress Plugin Multi Rating Multiple Unspecified Vulnerabilities (3.2.1)
-
-
High
WordPress Plugin Multisite Plugin Manager Multiple Cross-Site Scripting Vulnerabilities (3.1.1)
-
CWE-79
High
WordPress Plugin Myftp SQL Injection (2.0)
-
CWE-89
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Open Redirect (3.7.0)
-
CWE-601
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Open Redirect (2.6.4.4)
-
CWE-601
High
WordPress Plugin Newsletter-Send awesome emails from WordPress SQL Injection (3.0.8)
-
CWE-89
High
WordPress Plugin NOSpamPTI SQL Injection (2.1)
CVE-2013-5917
CWE-89
High
WordPress Plugin NS Utilities Unspecified Vulnerability (1.0)
-
-
High
WordPress Plugin Page Builder by SiteOrigin Cross-Site Scripting (2.0.4)
-
CWE-79
High
WordPress Plugin Page Showcaser Boxes Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Password Protected Open Redirect (1.4)
-
CWE-601
High