Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WooCommerce-Store Toolkit Privilege Escalation (1.5.6)
-
CWE-264
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.1.5.1)
-
CWE-79
High
WordPress Plugin WooSidebars Cross-Site Scripting (1.4.1)
-
CWE-79
High
WordPress Plugin WordPress Backup and Migrate-Backup Guard Arbitrary File Upload (1.0.2)
-
CWE-434
High
WordPress Plugin WordPress Popular Posts Cross-Site Scripting (3.3.2)
-
CWE-79
High
WordPress Plugin WP Admin UI Customize Cross-Site Scripting (1.5.2.6)
-
CWE-79
High
WordPress Plugin WP Advanced Importer Cross-Site Scripting (2.1.1)
-
CWE-79
High
WordPress Plugin WP Customer Reviews Unspecified Vulnerability (3.0.7)
-
-
High
WordPress Plugin WP e-Commerce-Store Exporter Privilege Escalation (1.6.6)
-
CWE-264
High
WordPress Plugin WP e-Commerce-Store Toolkit Privilege Escalation (2.0.1)
-
CWE-264
High
WordPress Plugin WP e-Commerce-Store Toolkit Privilege Escalation (2.0)
-
CWE-264
High
WordPress Plugin WP eCommerce Multiple Unspecified Vulnerabilities (3.9.3)
-
-
High
WordPress Plugin WP Edit Unspecified Vulnerability (3.0)
-
-
High
WordPress Plugin WP Google Maps Unspecified Vulnerability (6.2.1)
-
-
High
WordPress Plugin WP-Invoice-Web Invoice and Billing Multiple Vulnerabilities (4.1.0)
-
CWE-264
High
WordPress Plugin WP-Paginate Cross-Site Scripting (1.2.1)
-
CWE-79
High
WordPress Plugin WP-PostRatings SQL Injection (1.83.1)
-
CWE-89
High
WordPress Plugin WP Review Multiple Unspecified Vulnerabilities (2.0)
-
-
High
WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Multiple Unspecified Vulnerabilities (4.6.8)
-
-
High
WordPress Plugin WP Smart Image II Cross-Site Scripting (0.2)
-
CWE-79
High
WordPress Plugin WP Subscribe Cross-Site Scripting (1.0.2)
-
CWE-79
High
WordPress Plugin WP Ultimate Exporter Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin WP User Frontend-Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Arbitrary File Upload (2.3.10)
-
CWE-434
High
WordPress Plugin XML Sitemap & Google News feeds Cross-Site Scripting (4.5)
-
CWE-79
High
WordPress Plugin XML Sitemap & Google News feeds Cross-Site Scripting (3.9)
-
CWE-79
High
WordPress Plugin YITH WooCommerce Ajax Search Unspecified Vulnerability (1.2.7)
-
-
High
WordPress Plugin YITH WooCommerce Wishlist Unspecified Vulnerability (2.0.6)
-
-
High
WordPress Plugin Zendesk Chat Unspecified Vulnerability (1.3.9)
-
-
High
WordPress Plugin Basic Google Maps Placemarks Cross-Site Scripting (1.10.2)
-
CWE-79
High
WordPress Plugin Brandfolder-Digital Asset Management Simplified Local/Remote File Inclusion (3.0)
-
CWE-98
High
WordPress Plugin Brute Force Login Protection Unspecified Vulnerability (1.5)
-
-
High
WordPress Plugin Bulk Delete Privilege Escalation (5.5.3)
-
CWE-264
High
WordPress Plugin BulletProof Security Multiple Cross-Site Scripting Vulnerabilities (.53.2)
-
CWE-79
High
WordPress Plugin Calculated Fields Form Cross-Site Scripting (1.0.81)
-
CWE-79
High
WordPress Plugin Cimy User Extra Fields Denial of Service (2.6.3)
-
CWE-400
High
WordPress Plugin Contact Form Unspecified Vulnerability (1.2)
-
-
High
WordPress Plugin Custom Content Type Manager Backdoor (0.9.8.8)
-
CWE-95
High
WordPress Plugin Dharma booking Local/Remote File Inclusion (2.38.3)
-
CWE-98
High
WordPress Plugin Disable Feeds Unspecified Vulnerability (1.4)
-
-
High
WordPress Plugin DW Question & Answer Cross-Site Scripting (1.4.2.2)
-
CWE-79
High
WordPress Plugin Easy Image Gallery Cross-Site Scripting (1.1.1)
-
CWE-79
High
WordPress Plugin Email Encoder-Protect Email Addresses Multiple Cross-Site Scripting Vulnerabilities (1.4.3)
-
CWE-79
High
WordPress Plugin Facebook With Login Multiple Vulnerabilities (1.0)
-
CWE-89
High
WordPress Plugin FormBuilder Cross-Site Scripting (0.90)
-
CWE-79
High
WordPress Plugin Genesis Simple Share Cross-Site Scripting (1.0.6)
-
CWE-79
High
WordPress Plugin Gravity Forms Cross-Site Scripting (1.9.15.11)
-
CWE-79
High
WordPress Plugin HB AUDIO GALLERY LITE Arbitrary File Download (1.0.0)
-
CWE-538
High
WordPress Plugin I Recommend This SQL Injection (3.7.2)
-
CWE-89
High
WordPress Plugin Import CSV Directory Traversal (1.0)
-
CWE-22
High
WordPress Plugin Issuu Panel Local/Remote File Inclusion (1.6)
-
CWE-98
High
WordPress Plugin iThemes Security (formerly Better WP Security) Security Bypass (5.3.0)
-
CWE-330
High
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (3.9.1)
-
CWE-79
High
WordPress Plugin Juiz Social Post Sharer Multiple Cross-Site Scripting Vulnerabilities (1.3.3.7)
-
CWE-79
High
WordPress Plugin Magic Fields 2 Unspecified Vulnerability (2.3.2.2)
-
-
High
WordPress Plugin Mail Subscribe List Unspecified Vulnerability (2.0.9)
-
-
High
WordPress Plugin Maintenance Mode Unspecified Vulnerability (1.3.3)
-
-
High
WordPress Plugin Memphis Documents Library Arbitrary File Download (3.1.5)
-
CWE-538
High
WordPress Plugin More Fields Cross-Site Request Forgery (2.1)
-
CWE-352
High
WordPress Plugin Nextend Facebook Connect Unspecified Vulnerability (1.5.7)
-
-
High
WordPress Plugin Polldaddy Polls & Ratings Unspecified Vulnerability (2.0.25)
-
-
High
WordPress Plugin Polls CP Multiple Vulnerabilities (1.0.8)
-
CWE-352
High
WordPress Plugin Qtranslate Slug Unspecified Vulnerability (1.1.16)
-
-
High
WordPress Plugin Restricted Site Access Unspecified Vulnerability (2.0)
-
-
High
WordPress Plugin rtMedia for WordPress, BuddyPress and bbPress Cross-Site Scripting (3.10.1)
-
CWE-79
High
WordPress Plugin SB Welcome Email Editor Unspecified Vulnerability (4.1)
-
-
High
WordPress Plugin Site Import Remote File Inclusion (1.0.1)
-
CWE-98
High
WordPress Plugin Slideshow Gallery LITE Cross-Site Scripting (1.5.3.4)
-
CWE-79
High
WordPress Plugin Smart Layers by AddThis Unspecified Vulnerability (1.0.1)
-
-
High
WordPress Plugin Social Share Icons & Social Share Buttons Unspecified Vulnerability (1.4)
-
-
High
WordPress Plugin Soundy Background Music Cross-Site Scripting (3.1)
-
CWE-79
High
WordPress Plugin SP Project & Document Manager Multiple Vulnerabilities (2.5.9.7)
-
CWE-434
High
WordPress Plugin SSL Insecure Content Fixer Information Disclosure (2.0.0)
-
CWE-200
High
WordPress Plugin Stealth Login Page Unspecified Vulnerability (1.1.3)
-
-
High
WordPress Plugin VaultPress Cross-Site Scripting (1.7.7)
-
CWE-79
High
WordPress Plugin Video Gallery /w YouTube, Vimeo Multiple Vulnerabilities (8.80)
-
CWE-352
High