Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Missing Update

This page lists 22224 vulnerabilities in this category.

Critical: 1394 High: 12186 Medium: 7891 Low: 749 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Ultimate Membership Pro SQL Injection (3.3)
-
CWE-89
High
WordPress Plugin User Role Editor Security Bypass (4.24)
-
CWE-264
High
WordPress Plugin Facebook Promotion Generator for WordPress Multiple Cross-Site Scripting Vulnerabilities (1.3.4)
CVE-2014-4528
CWE-79
High
WordPress Plugin FancyBox for WordPress Cross-Site Scripting (3.0.2)
-
CWE-79
High
WordPress Plugin FancyBox for WordPress Security Bypass (3.0.2)
CVE-2015-1494
CWE-264
High
WordPress Plugin Flash Photo Gallery Cross-Site Scripting (0.7)
CVE-2014-4529
CWE-79
High
WordPress Plugin Flog Cross-Site Scripting (0.1)
CVE-2014-4530
CWE-79
High
WordPress Plugin User Role by BestWebSoft Cross-Site Scripting (1.5.1)
-
CWE-79
High
WordPress Plugin Game tabs Cross-Site Scripting (0.4.0)
CVE-2014-4531
CWE-79
High
WordPress Plugin GarageSale Cross-Site Scripting (1.2.2)
CVE-2014-4532
CWE-79
High
WordPress Plugin ULTIMATE TABLES SQL Injection (1.5)
-
CWE-89
High
WordPress Plugin GdeSlon Affiliate Shop Open Redirect (2.0)
-
CWE-601
High
WordPress Plugin GEO Redirector Cross-Site Scripting (1.0.1)
CVE-2014-4533
CWE-79
High
WordPress Plugin Global Flash Galleries Cross-Site Scripting (0.13.4)
-
CWE-79
High
WordPress Plugin Gmedia Photo Gallery Cross-Site Scripting (0.9.3)
-
CWE-79
High
WordPress Plugin Social Media Share Buttons & Social Sharing Icons Security Bypass (1.5.1)
-
CWE-264
High
WordPress Plugin Google Doc Embedder Cross-Site Scripting (2.5.18)
CVE-2015-1879
CWE-79
High
WordPress Plugin Gravity Forms Arbitrary File Upload (1.8.19)
-
CWE-434
High
WordPress Plugin HDW Player (Video Player & Video Gallery) SQL Injection (2.4.2)
CVE-2014-5180
CWE-89
High
WordPress Plugin Hot Files:File Sharing and Download Manager Cross-Site Scripting (1.0.0)
CVE-2014-4588
CWE-79
High
WordPress Plugin HTML5 jQuery Audio Player Multiple Cross-Site Scripting Vulnerabilities (2.3)
-
CWE-79
High
WordPress Plugin HTML5 Lyrics Karaoke Player Cross-Site Scripting (1.06)
-
CWE-79
High
WordPress Plugin HTML5 Video Player with Playlist Multiple Cross-Site Scripting Vulnerabilities (2.40)
CVE-2014-4534
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Security Bypass (1.3.52)
-
CWE-264
High
WordPress Plugin TubePress Cross-Site Scripting (1.6.0)
-
CWE-79
High
WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (5.0.05)
-
CWE-79
High
WordPress Plugin Image Metadata Cruncher Multiple Vulnerabilities (1.8)
CVE-2015-1614
CWE-352
High
WordPress Plugin SupportFlow Multiple Cross-Site Scripting Vulnerabilities (0.6)
-
CWE-79
High
WordPress Plugin Social Share Icons & Social Share Buttons Security Bypass (2.4.5)
-
CWE-264
High
WordPress Plugin Social Media Tab Remote Code Execution (1.0.9)
-
CWE-94
High
WordPress Plugin WP Mobile Detector Arbitrary File Upload (3.5)
-
CWE-434
High
WordPress Plugin wp-football Multiple Cross-Site Scripting Vulnerabilities (1.1)
CVE-2014-4586
CWE-79
High
WordPress Plugin Daily Inspiration Generator Open Redirect (2.0)
-
CWE-601
High
WordPress Plugin mywebcounter Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin JS MultiHotel Cross-Site Scripting (2.2.1)
CVE-2013-7419
CWE-79
High
WordPress Plugin Keyring Cross-Site Scripting (1.5)
-
CWE-79
High
WordPress Plugin Keyword Strategy Internal Links Multiple Cross-Site Scripting Vulnerabilities (2.0)
CVE-2014-4537
CWE-79
High
WordPress Plugin Lightbox Photo Gallery Cross-Site Request Forgery (1.0)
CVE-2014-9441
CWE-352
High
WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.4.0)
-
CWE-79
High
WordPress Plugin Affiliates Multiple Cross-Site Scripting Vulnerabilities (2.13.1)
-
CWE-79
High
WordPress Plugin Advanced AJAX Page Loader Arbitrary File Upload (2.7.6)
-
CWE-434
High
WordPress Plugin Adminer Multiple Cross-Site Scripting Vulnerabilities (1.4.3)
-
CWE-79
High
WordPress Plugin Manage Calameo Publications by Athlon Cross-Site Scripting (1.1.0)
-
CWE-79
High
WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files Multiple Vulnerabilities (1.6.0)
-
CWE-79
High
WordPress Plugin Mikiurl WordPress Eklentisi Cross-Site Request Forgery (2.0)
CVE-2014-9337
CWE-352
High
WordPress Plugin MiniMax-Page Layout Builder Cross-Site Scripting (1.3.4)
-
CWE-79
High
WordPress Plugin MP3-jPlayer Multiple Cross-Site Scripting Vulnerabilities (1.8.11)
-
CWE-79
High
WordPress Plugin O2Tweet Cross-Site Request Forgery (0.0.4)
CVE-2014-9338
CWE-352
High
WordPress Plugin ImmoPress Cross-Site Scripting (0.0.4)
-
CWE-79
High
WordPress Plugin Our Team Showcase Cross-Site Request Forgery (1.2)
CVE-2014-9523
CWE-352
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Arbitrary File Upload (1.2.5)
CVE-2014-9312
CWE-434
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Vulnerabilities (1.2.9)
CVE-2015-1394
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.2.7)
CVE-2015-1055
CWE-89
High
WordPress Plugin PhotoSmash Galleries Arbitrary File Upload (1.0.7)
-
CWE-434
High
WordPress Plugin PictoBrowser Cross-Site Request Forgery (0.3.1)
CVE-2014-9392
CWE-352
High
WordPress Plugin Pixabay Images Multiple Vulnerabilities (2.3)
CVE-2015-1376
CWE-592
High
WordPress Plugin Pods-Custom Content Types and Fields Multiple Vulnerabilities (2.4.3)
CVE-2014-7957
CWE-352
High
WordPress Plugin Admin Bar User Switching Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin Post to Twitter Cross-Site Request Forgery (0.7)
CVE-2014-9393
CWE-352
High
WordPress Plugin PowerPress Podcasting by Blubrry Cross-Site Scripting (6.0)
CVE-2015-1385
CWE-79
High
WordPress Plugin PWG Random Cross-Site Request Forgery (1.11)
CVE-2014-9394
CWE-352
High
WordPress Plugin Recommend to a friend Cross-Site Scripting (2.0.2)
CVE-2013-7276
CWE-79
High
WordPress Plugin IP Ban Cross-Site Request Forgery (1.2.3)
CVE-2014-9413
CWE-352
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.3.7)
-
CWE-79
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Security Bypass (2.0.13)
CVE-2014-8802
CWE-264
High
WordPress Plugin Co-Authors Plus Multiple Unspecified Vulnerabilities (3.1.2)
-
-
High
WordPress Plugin DandyID Services Cross-Site Request Forgery (1.5.9)
CVE-2014-9335
CWE-352
High
WordPress Plugin DB Backup Directory Traversal (4.5)
CVE-2014-9119
CWE-22
High
WordPress Plugin Duo Two-Factor Authentication Security Bypass (1.8.1)
-
CWE-592
High
WordPress Plugin Custom Dashboard & Login Page-AGCA Multiple Unspecified Vulnerabilities (1.5.4.2)
-
-
High
WordPress Plugin Contact Form Email Cross-Site Scripting (1.1.47)
-
CWE-79
High
WordPress Plugin DZS Video Gallery Information Disclosure (3.1.3)
-
CWE-200
High
WordPress Plugin ENL Newsletter SQL Injection (1.0.1)
CVE-2014-4939
CWE-89
High
WordPress Plugin Code Snippets Cross-Site Scripting (2.6.1)
-
CWE-79
High
WordPress Plugin Facebook Like Box Cross-Site Request Forgery (2.8.2)
CVE-2014-9524
CWE-352
High