Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12791 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Job Manager Cross-Site Scripting (0.7.24)
-
CWE-79
High
WordPress Plugin Job Manager Cross-Site Scripting (0.7.22)
CVE-2015-2321
CWE-79
High
WordPress Plugin Job Manager Security Bypass (0.7.25)
CVE-2015-6668
CWE-287
High
WordPress Plugin Livefyre Comments 3 Cross-Site Scripting (4.1.4)
-
CWE-79
High
WordPress Plugin MainWP Dashboard Unspecified Vulnerability (2.0.22)
-
-
High
WordPress Plugin MDC Private Message Cross-Site Scripting (1.0.0)
CVE-2015-6805
CWE-79
High
WordPress Plugin Monetize Multiple Vulnerabilities (1.03)
-
CWE-352
High
WordPress Plugin MP3-jPlayer Information Disclosure (2.3.2)
CVE-2015-1000008
CWE-200
High
WordPress Plugin Music Store Open Redirect (1.0.14)
-
CWE-601
High
WordPress Plugin Music Store Unspecified Vulnerability (1.0.20)
-
-
High
WordPress Plugin Navis DocumentCloud Cross-Site Scripting (0.1)
CVE-2015-2807
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.1.9)
-
CWE-22
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.9.21)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Unspecified Vulnerability (2.9.24)
-
-
High
WordPress Plugin Private Only Multiple Vulnerabilities (3.5.1)
CVE-2015-5483
CWE-352
High
WordPress Plugin qTranslate Cross-Site Scripting (2.5.39)
CVE-2015-5535
CWE-79
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.1.5.2)
CVE-2015-9273
CWE-79
High
WordPress Plugin The Holiday Calendar Cross-Site Scripting (1.11.2)
CVE-2015-9270
CWE-79
High
WordPress Plugin Thumbnail carousel slider Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Unite Gallery Lite Multiple Vulnerabilities (1.4.6)
-
CWE-352
High
WordPress Plugin Welcart e-Commerce Multiple Vulnerabilities (1.4.17)
-
CWE-89
High
WordPress Plugin WordPress Gallery Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin WP Accurate Form Data Multiple Vulnerabilities (1.2)
-
CWE-352
High
WordPress Plugin WP Flash Player Multiple Cross-Site Scripting Vulnerabilities (1.3)
-
CWE-79
High
WordPress Plugin WP OAuth Server (OAuth Authentication) Security Bypass (3.1.4)
-
CWE-326
High
WordPress Plugin WP-Polls Cross-Site Scripting (2.69)
-
CWE-79
High
WordPress Plugin WP REST API (WP API) Cross-Site Scripting (1.2.2)
-
CWE-79
High
WordPress Plugin WP REST API (WP API) Information Disclosure (1.2)
-
CWE-200
High
WordPress Plugin WP REST API (WP API) Security Bypass (1.2.1)
-
CWE-264
High
WordPress Plugin WP Statistics Cross-Site Scripting (9.5.1)
-
CWE-79
High
WordPress Plugin WP Statistics SQL Injection (9.4)
-
CWE-89
High
WordPress Plugin WP Symposium SQL Injection (15.5.1)
-
CWE-89
High
WordPress Plugin YouTube Embed Cross-Site Scripting (3.3.2)
CVE-2015-6535
CWE-79
High
WordPress Plugin ALO EasyMail Newsletter Multiple Vulnerabilities (2.6.00)
-
CWE-352
High
WordPress Plugin Appointment Booking Calendar Multiple Vulnerabilities (1.1.7)
CVE-2015-7320
CWE-89
High
WordPress Plugin BJ Lazy Load Remote Code Execution (0.7.5)
-
CWE-94
High
WordPress Plugin Contact Form 7 Security Bypass (4.1)
-
CWE-330
High
WordPress Plugin Contact Form Generator Multiple Cross-Site Request Forgery Vulnerabilities (2.1.86)
CVE-2015-6965
CWE-352
High
WordPress Plugin CP Reservation Calendar SQL Injection (1.1.6)
CVE-2015-7235
CWE-89
High
WordPress Plugin Csv2WPeC Coupon Arbitrary File Upload (1.1)
CVE-2015-1000013
CWE-434
High
WordPress Plugin eShop Multiple Vulnerabilities (6.3.13)
-
CWE-352
High
WordPress Plugin EZ SQL Reports Shortcode Widget and DB Backup Multiple Vulnerabilities (4.11.33)
-
CWE-94
High
WordPress Plugin Gallery-Photo Albums-Portfolio Cross-Site Scripting (1.3.47)
CVE-2015-7386
CWE-79
High
WordPress Plugin lasTunes Cross-Site Scripting (3.6.1)
-
CWE-79
High
WordPress Plugin MyPixs Local File Inclusion (0.3)
CVE-2015-1000012
CWE-22
High
WordPress Plugin Postmatic-Post and comment subscriptions that invite you to hit reply Cross-Site Scripting (1.4.5)
-
CWE-79
High
WordPress Plugin RoyalSlider Cross-Site Scripting (3.2.4)
-
CWE-79
High
WordPress Plugin RoyalSlider Cross-Site Scripting (3.2.6)
-
CWE-79
High
WordPress Plugin SecureMoz Security Audit PHP Object Injection (1.0.5)
CVE-2015-6828
CWE-915
High
WordPress Plugin sourceAFRICA Cross-Site Scripting (0.1.3)
CVE-2015-6920
CWE-79
High
WordPress Plugin Testimonial Slider Cross-Site Scripting (1.2.1)
-
CWE-79
High
WordPress Plugin WatuPRO Multiple Vulnerabilities (4.8.8.4)
-
CWE-352
High
WordPress Plugin wordpress vertical image slider Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin WP Limit Login Attempts SQL Injection (2.0.0)
CVE-2015-6829
CWE-89
High
WordPress Plugin WP Shop Multiple Vulnerabilities (3.4.3.18)
-
CWE-352
High
WordPress Plugin WP Super Cache Multiple Vulnerabilities (1.4.4)
-
CWE-915
High
WordPress Plugin WP Symposium Cross-Site Scripting (15.8.1)
CVE-2015-9414
CWE-79
High
WordPress Plugin WPML (WordPress Multilingual) Cross-Site Scripting (3.2.6)
-
CWE-79
High
WordPress Plugin xPinner Lite Multiple Vulnerabilities (2.2)
-
CWE-352
High
WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (4.4.3)
-
CWE-79
High
WordPress Plugin Akismet Cross-Site Scripting (3.1.4)
-
CWE-79
High
WordPress Plugin AlertWire Information Disclosure (1.1.1)
-
CWE-200
High
WordPress Plugin BulletProof Security Cross-Site Scripting (.52.4)
-
CWE-79
High
WordPress Plugin Crony Cronjob Manager Multiple Vulnerabilities (0.4.4)
CVE-2017-14530
CWE-352
High
WordPress Plugin DukaPress Multiple Cross-Site Scripting Vulnerabilities (2.5.9)
-
CWE-79
High
WordPress Plugin Easy2Map Multiple Vulnerabilities (1.2.9)
CVE-2015-7669
CWE-79
High
WordPress Plugin Events Made Easy Multiple Vulnerabilities (1.5.49)
-
CWE-352
High
WordPress Plugin EZ Google Analytics Cross-Site Scripting (4.1.06)
-
CWE-79
High
WordPress Plugin EZ Portfolio Multiple Cross-Site Scripting Vulnerabilities (1.0.1)
-
CWE-79
High
WordPress Plugin Fast Secure Contact Form Cross-Site Scripting (4.0.37)
-
CWE-79
High
WordPress Plugin Fast Secure Contact Form Cross-Site Scripting (4.0.35)
-
CWE-79
High
WordPress Plugin Favicon by RealFaviconGenerator Cross-Site Scripting (1.2.12)
-
CWE-79
High
WordPress Plugin Favicon by RealFaviconGenerator Unspecified Vulnerability (1.2.13)
-
-
High
WordPress Plugin Font-official webfonts plugin of Fonts For Web Directory Traversal (7.5)
CVE-2015-7683
CWE-22
High
WordPress Plugin Form Manager Remote Command Execution (1.7.2)
CVE-2015-7806
CWE-94
High