Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13196 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin 1-click Retweet/Share/Like Cross-Site Scripting (5.2)
-
CWE-79
High
WordPress Plugin Admin Pack by SITE CASEIRO Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Ads in bottom right Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Advance Categorizer Cross-Site Scripting (0.3)
-
CWE-79
High
WordPress Plugin Advertisement Management Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Altos Connect Widget Cross-Site Scripting (1.3.0)
-
CWE-79
High
WordPress Plugin Analyticator Multiple Cross-Site Scripting Vulnerabilities (6.4.9.5)
CVE-2015-6238
CWE-79
High
WordPress Plugin arcResBookingWidget Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Author Manager Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Avenir-soft Direct Download Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Bookmarkify Multiple Vulnerabilities (2.9.2)
-
CWE-352
High
WordPress Plugin Captain Slider Cross-Site Scripting (1.0.6)
-
CWE-79
High
WordPress Plugin Car Rental System SQL Injection (3.0)
-
CWE-89
High
WordPress Plugin Chief Editor Multiple Vulnerabilities (3.7.1)
-
CWE-352
High
WordPress Plugin Content Grabber Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Copy or Move Comments Multiple Vulnerabilities (1.0.0)
-
CWE-352
High
WordPress Plugin Customize Youtube Videos Multiple Vulnerabilities (0.2)
-
CWE-352
High
WordPress Plugin Database Sync Cross-Site Scripting (0.4)
-
CWE-79
High
WordPress Plugin Default Facebook Thumbnails Multiple Vulnerabilities (0.4)
-
CWE-352
High
WordPress Plugin DukaPress SQL Injection (2.5.9)
CVE-2015-1000011
CWE-89
High
WordPress Plugin Facebook, Twitter & Google+ Social Widgets Multiple Vulnerabilities (1.3.7)
-
CWE-352
High
WordPress Plugin Flickr Justified Gallery Cross-Site Scripting (3.3.6)
-
CWE-79
High
WordPress Plugin Google Analytics Dashboard Plugin for WordPress by MonsterInsights Cross-Site Scripting (5.4.4)
-
CWE-79
High
WordPress Plugin Google 'Plus one' Button by kms Multiple Vulnerabilities (1.5.0)
-
CWE-352
High
WordPress Plugin Googmonify Multiple Vulnerabilities (0.5.1)
-
CWE-352
High
WordPress Plugin Hide My WP Cross-Site Scripting (4.51.1)
-
CWE-79
High
WordPress Plugin Hide My WP Cross-Site Scripting (4.53)
-
CWE-79
High
WordPress Plugin iframe Cross-Site Scripting (4.0)
-
CWE-79
High
WordPress Plugin iframe Cross-Site Scripting (3.0)
-
CWE-79
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Unspecified Vulnerability (3.7.2)
-
-
High
WordPress Plugin Job Manager Cross-Site Scripting (0.7.24)
-
CWE-79
High
WordPress Plugin Job Manager Cross-Site Scripting (0.7.22)
CVE-2015-2321
CWE-79
High
WordPress Plugin Job Manager Security Bypass (0.7.25)
CVE-2015-6668
CWE-287
High
WordPress Plugin Livefyre Comments 3 Cross-Site Scripting (4.1.4)
-
CWE-79
High
WordPress Plugin MainWP Dashboard Unspecified Vulnerability (2.0.22)
-
-
High
WordPress Plugin MDC Private Message Cross-Site Scripting (1.0.0)
CVE-2015-6805
CWE-79
High
WordPress Plugin Monetize Multiple Vulnerabilities (1.03)
-
CWE-352
High
WordPress Plugin MP3-jPlayer Information Disclosure (2.3.2)
CVE-2015-1000008
CWE-200
High
WordPress Plugin Music Store Open Redirect (1.0.14)
-
CWE-601
High
WordPress Plugin Music Store Unspecified Vulnerability (1.0.20)
-
-
High
WordPress Plugin Navis DocumentCloud Cross-Site Scripting (0.1)
CVE-2015-2807
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.1.9)
-
CWE-22
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.9.21)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Unspecified Vulnerability (2.9.24)
-
-
High
WordPress Plugin Private Only Multiple Vulnerabilities (3.5.1)
CVE-2015-5483
CWE-352
High
WordPress Plugin qTranslate Cross-Site Scripting (2.5.39)
CVE-2015-5535
CWE-79
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.1.5.2)
CVE-2015-9273
CWE-79
High
WordPress Plugin The Holiday Calendar Cross-Site Scripting (1.11.2)
CVE-2015-9270
CWE-79
High
WordPress Plugin Thumbnail carousel slider Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Unite Gallery Lite Multiple Vulnerabilities (1.4.6)
-
CWE-352
High
WordPress Plugin Welcart e-Commerce Multiple Vulnerabilities (1.4.17)
-
CWE-89
High
WordPress Plugin WordPress Gallery Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin WP Accurate Form Data Multiple Vulnerabilities (1.2)
-
CWE-352
High
WordPress Plugin WP Flash Player Multiple Cross-Site Scripting Vulnerabilities (1.3)
-
CWE-79
High
WordPress Plugin WP OAuth Server (OAuth Authentication) Security Bypass (3.1.4)
-
CWE-326
High
WordPress Plugin WP-Polls Cross-Site Scripting (2.69)
-
CWE-79
High
WordPress Plugin WP REST API (WP API) Cross-Site Scripting (1.2.2)
-
CWE-79
High
WordPress Plugin WP REST API (WP API) Information Disclosure (1.2)
-
CWE-200
High
WordPress Plugin WP REST API (WP API) Security Bypass (1.2.1)
-
CWE-264
High
WordPress Plugin WP Statistics Cross-Site Scripting (9.5.1)
-
CWE-79
High
WordPress Plugin WP Statistics SQL Injection (9.4)
-
CWE-89
High
WordPress Plugin WP Symposium SQL Injection (15.5.1)
-
CWE-89
High
WordPress Plugin YouTube Embed Cross-Site Scripting (3.3.2)
CVE-2015-6535
CWE-79
High
WordPress Plugin ALO EasyMail Newsletter Multiple Vulnerabilities (2.6.00)
-
CWE-352
High
WordPress Plugin Appointment Booking Calendar Multiple Vulnerabilities (1.1.7)
CVE-2015-7320
CWE-89
High
WordPress Plugin BJ Lazy Load Remote Code Execution (0.7.5)
-
CWE-94
High
WordPress Plugin Contact Form 7 Security Bypass (4.1)
-
CWE-330
High
WordPress Plugin Contact Form Generator Multiple Cross-Site Request Forgery Vulnerabilities (2.1.86)
CVE-2015-6965
CWE-352
High
WordPress Plugin CP Reservation Calendar SQL Injection (1.1.6)
CVE-2015-7235
CWE-89
High
WordPress Plugin Csv2WPeC Coupon Arbitrary File Upload (1.1)
CVE-2015-1000013
CWE-434
High
WordPress Plugin eShop Multiple Vulnerabilities (6.3.13)
-
CWE-352
High
WordPress Plugin EZ SQL Reports Shortcode Widget and DB Backup Multiple Vulnerabilities (4.11.33)
-
CWE-94
High
WordPress Plugin Gallery-Photo Albums-Portfolio Cross-Site Scripting (1.3.47)
CVE-2015-7386
CWE-79
High
WordPress Plugin lasTunes Cross-Site Scripting (3.6.1)
-
CWE-79
High
WordPress Plugin MyPixs Local File Inclusion (0.3)
CVE-2015-1000012
CWE-22
High