Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23975 vulnerabilities in this category.

Critical: 1584 High: 12800 Medium: 8788 Low: 799 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WooCommerce Upload Files Arbitrary File Upload (59.3)
CVE-2021-24171
CWE-434
High
WordPress Plugin WordPress Custom Global Variable Unspecified Vulnerability (3.0.0)
-
-
High
WordPress Plugin WordPress Related Posts Cross-Site Scripting (3.6.4)
CVE-2021-24211
CWE-79
High
WordPress Plugin WP Armour-Honeypot Anti Spam Cross-Site Scripting (1.5.6)
-
CWE-79
High
WordPress Plugin WP-Curriculo Vitae Free Arbitrary File Upload (6.3)
CVE-2021-24222
CWE-434
High
WordPress Plugin WP ERP-Complete WordPress Business Manager with HR, CRM & Accounting Systems for Small Businesses Cross-Site Request Forgery (1.7.4)
-
CWE-352
High
WordPress Plugin Cookie Information-Free GDPR Consent Solution Cross-Site Scripting (1.5.5)
-
CWE-79
High
WordPress Plugin WP Hotel Booking Remote Code Execution (1.10.2)
CVE-2020-29047
CWE-502
High
WordPress Plugin WP Page Builder Multiple Vulnerabilities (1.2.3)
CVE-2021-24208
CWE-264
High
WordPress Plugin WP Project Manager-Task, team, and project management featuring kanban board and gantt charts Cross-Site Request Forgery (2.4.9)
-
CWE-352
High
WordPress Plugin WP Super Cache Remote Code Execution (1.7.1)
CVE-2021-24209
CWE-94
High
WordPress Plugin WP Travel-Best Travel Booking, Tour Management Engine Cross-Site Request Forgery (4.4.6)
-
CWE-352
High
WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Unspecified Vulnerability (2.6.21)
-
-
High
WordPress Plugin Advanced Booking Calendar Cross-Site Scripting (1.6.6)
CVE-2021-24225
CWE-79
High
WordPress Plugin Advanced Booking Calendar Cross-Site Scripting (1.6.7)
CVE-2021-24232
CWE-79
High
WordPress Plugin Advanced Custom Fields PRO Cross-Site Scripting (5.9.0)
CVE-2021-24241
CWE-79
High
WordPress Plugin All 404 Redirect to Homepage Cross-Site Scripting (1.20)
CVE-2021-24326
CWE-79
High
WordPress Plugin All-in-One Addons for Elementor-WidgetKit Multiple Cross-Site Scripting Vulnerabilities (2.3.9)
CVE-2021-24267
CWE-79
High
WordPress Plugin BuddyPress Multiple Security Bypass Vulnerabilities (7.2.1)
-
CWE-264
High
WordPress Plugin Captchinoo, Google recaptcha for admin login page Cross-Site Request Forgery (2.4)
-
CWE-352
High
WordPress Plugin Captchinoo, Google recaptcha for admin login page Security Bypass (2.3)
-
CWE-264
High
WordPress Plugin Car Seller-Auto Classifieds Script SQL Injection (2.1.0)
CVE-2021-24285
CWE-89
High
WordPress Plugin classyfrieds Arbitrary File Upload (3.8)
CVE-2021-24253
CWE-434
High
WordPress Plugin Clever Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (2.0.15)
CVE-2021-24273
CWE-79
High
WordPress Plugin College publisher Import Arbitrary File Upload (0.1)
CVE-2021-24254
CWE-434
High
WordPress Plugin Conditional Marketing Mailer for WooCommerce Cross-Site Request Forgery (1.5.2)
-
CWE-352
High
WordPress Plugin Conditional Marketing Mailer for WooCommerce Security Bypass (1.5.1)
-
CWE-264
High
WordPress Plugin Conditional Marketing Mailer for WooCommerce Unspecified Vulnerability (1.6)
-
-
High
WordPress Plugin Content Copy Protection & Prevent Image Save Cross-Site Request Forgery (1.3)
CVE-2021-24333
CWE-352
High
WordPress Plugin Cooked Pro Cross-Site Scripting (1.7.5.5)
CVE-2021-24233
CWE-79
High
WordPress Plugin DethemeKit For Elementor Multiple Cross-Site Scripting Vulnerabilities (1.5.5.4)
CVE-2021-24270
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Request Forgery (2.10.2)
-
CWE-352
High
WordPress Plugin Easy Form Builder Arbitrary File Upload (1.0)
CVE-2021-24224
CWE-434
High
WordPress Plugin Edwiser Bridge-WordPress Moodle LMS Integration Unspecified Vulnerability (2.0.7)
-
-
High
WordPress Plugin Elementor Addon Elements Multiple Cross-Site Scripting Vulnerabilities (1.11.1)
CVE-2021-24259
CWE-79
High
WordPress Plugin Elementor-Header, Footer & Blocks Template Multiple Cross-Site Scripting Vulnerabilities (1.5.7)
CVE-2021-24256
CWE-79
High
WordPress Plugin Elements kit Elementor addons (Header & Footer Builder, Mega Menu Builder, Layout Library) Multiple Cross-Site Scripting Vulnerabilities (2.1.7)
CVE-2021-24258
CWE-79
High
WordPress Plugin Erident Custom Login and Dashboard Cross-Site Scripting (3.5.8)
CVE-2021-24658
CWE-79
High
WordPress Plugin Essential Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (4.5.3)
CVE-2021-24255
CWE-79
High
WordPress Plugin fitness calculators Cross-Site Request Forgery (1.9.5)
CVE-2021-24272
CWE-352
High
WordPress Plugin Freetobook review widget Unspecified Vulnerability (1.0)
-
-
High
WordPress Plugin freetobook widget Unspecified Vulnerability (1.0.5)
-
-
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.10.3)
CVE-2021-24315
CWE-79
High
WordPress Plugin Happy Addons for Elementor Cross-Site Scripting (2.23.0)
CVE-2021-24292
CWE-79
High
WordPress Plugin Happy Addons for Elementor Pro Cross-Site Scripting (1.16.0)
CVE-2021-24292
CWE-79
High
WordPress Plugin HT Mega-Absolute Addons for Elementor Page Builder Multiple Cross-Site Scripting Vulnerabilities (1.5.5)
CVE-2021-24261
CWE-79
High
WordPress Plugin Image Hover Effects-Elementor Addon Multiple Cross-Site Scripting Vulnerabilities (1.3.3)
CVE-2021-24264
CWE-79
High
WordPress Plugin Imagements Arbitrary File Upload (1.2.5)
CVE-2021-24236
CWE-434
High
WordPress Plugin Ivory Search-WordPress Search Cross-Site Scripting (4.6)
CVE-2021-24234
CWE-79
High
WordPress Plugin JetWidgets For Elementor Multiple Cross-Site Scripting Vulnerabilities (1.0.8)
CVE-2021-24268
CWE-79
High
WordPress Plugin Larsens Calender Cross-Site Scripting (1.2)
CVE-2020-23762
CWE-79
High
WordPress Plugin Livemesh Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (6.7.1)
CVE-2021-24260
CWE-79
High
WordPress Plugin Login as User or Customer Cross-Site Request Forgery (1.9)
-
CWE-352
High
WordPress Plugin Login as User or Customer Security Bypass (1.7)
-
CWE-264
High
WordPress Plugin Modern WPBakery Page Builder Addons (formerly Visual Composer)-Add-ons Arbitrary File Upload (3.0.1)
CVE-2021-24284
CWE-434
High
WordPress Plugin One page checkout and layouts for woocommerce Unspecified Vulnerability (2.7)
-
-
High
WordPress Plugin PowerPack Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (2.3.1)
CVE-2021-24263
CWE-79
High
WordPress Plugin Premium Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (4.2.7)
CVE-2021-24257
CWE-79
High
WordPress Plugin Redirection for Contact Form 7 Multiple Vulnerabilities (2.3.3)
CVE-2021-24282
CWE-915
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Cross-Site Scripting (3.7.0.0)
CVE-2021-24239
CWE-79
High
WordPress Plugin Rife Elementor Extensions & Templates Multiple Cross-Site Scripting Vulnerabilities (1.1.5)
CVE-2021-24265
CWE-79
High
WordPress Plugin Rise Blocks-A Complete Gutenberg Page Builder Unspecified Vulnerability (1.0.0)
-
-
High
WordPress Plugin RSS for Yandex Turbo Cross-Site Scripting (1.29)
CVE-2021-24277
CWE-79
High
WordPress Plugin SecuPress Free-WordPress Security Security Bypass (1.4.13)
-
CWE-264
High
WordPress Plugin SecuPress Pro Security Bypass (1.4.12)
-
CWE-264
High
WordPress Plugin ShopLentor-WooCommerce Builder for Elementor & Gutenberg +10 Modules-All in One Solution (formerly WooLentor) Multiple Cross-Site Scripting Vulnerabilities (1.8.5)
CVE-2021-24262
CWE-79
High
WordPress Plugin Simple Membership SQL Injection (4.0.3)
CVE-2021-29232
CWE-89
High
WordPress Plugin Sina Extension for Elementor Multiple Cross-Site Scripting Vulnerabilities (3.3.11)
CVE-2021-24269
CWE-79
High
WordPress Plugin Software License Manager Cross-Site Request Forgery (4.4.5)
CVE-2021-20782
CWE-352
High
WordPress Plugin Store Locator Plus for WordPress Cross-Site Scripting (5.5.15)
CVE-2021-24290
CWE-79
High
WordPress Plugin Store Locator Plus for WordPress Privilege Escalation (5.5.14)
CVE-2021-24289
CWE-264
High
WordPress Plugin The Plus Addons for Elementor Page Builder Lite Multiple Cross-Site Scripting Vulnerabilities (2.0.5)
CVE-2021-24266
CWE-79
High
WordPress Plugin Tutor LMS-eLearning and online course solution Local File Inclusion (1.8.7)
CVE-2021-24242
CWE-22
High
WordPress Plugin Ultimate Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (1.29.2)
CVE-2021-24271
CWE-79
High
WordPress Plugin User Rights Access Manager Security Bypass (1.0.3)
-
CWE-264
High