Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Missing Update

This page lists 22224 vulnerabilities in this category.

Critical: 1394 High: 12186 Medium: 7891 Low: 749 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WP Admin UI Customize Cross-Site Scripting (1.5.2.6)
-
CWE-79
High
WordPress Plugin WP eCommerce Multiple Unspecified Vulnerabilities (3.9.3)
-
-
High
WordPress Plugin WordPress Popular Posts Cross-Site Scripting (3.3.2)
-
CWE-79
High
WordPress Plugin Analyticator Multiple Cross-Site Scripting Vulnerabilities (6.4.9.5)
CVE-2015-6238
CWE-79
High
WordPress Plugin WordPress Backup and Migrate-Backup Guard Arbitrary File Upload (1.0.2)
-
CWE-434
High
WordPress Plugin WooSidebars Cross-Site Scripting (1.4.1)
-
CWE-79
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.1.5.1)
-
CWE-79
High
WordPress Plugin arcResBookingWidget Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin WooCommerce-Store Toolkit Privilege Escalation (1.5.6)
-
CWE-264
High
WordPress Plugin WooCommerce-Store Toolkit Privilege Escalation (1.5.7)
-
CWE-264
High
WordPress Plugin Author Manager Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin WooCommerce-Store Exporter Privilege Escalation (1.8.3)
CVE-2016-10935
CWE-264
High
WordPress Plugin WooCommerce Multilingual-run WooCommerce with WPML Multiple Unspecified Vulnerabilities (3.5.4)
-
-
High
WordPress Plugin Avenir-soft Direct Download Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin wptf-image-gallery Arbitrary File Download (1.0.3)
CVE-2015-1000007
CWE-538
High
WordPress Plugin WP Edit Unspecified Vulnerability (3.0)
-
-
High
WordPress Plugin WooCommerce Checkout Manager Multiple Unspecified Vulnerabilities (3.6.9)
-
-
High
WordPress Plugin XML Sitemap & Google News feeds Cross-Site Scripting (4.5)
-
CWE-79
High
WordPress Plugin Zendesk Chat Unspecified Vulnerability (1.3.9)
-
-
High
WordPress Plugin YITH WooCommerce Wishlist Unspecified Vulnerability (2.0.6)
-
-
High
WordPress Plugin Recent Backups Arbitrary File Download (0.7)
CVE-2015-1000006
CWE-22
High
WordPress Plugin S3Bubble Cloud Video With Adverts & Analytics Arbitrary File Download (0.7)
CVE-2015-9464
CWE-22
High
WordPress Plugin Simple Ads Manager Denial of Service (2.9.3.114)
-
CWE-400
High
WordPress Plugin Simple Image Manipulator Arbitrary File Download (1.0)
CVE-2015-1000010
CWE-538
High
WordPress Plugin StageShow Multiple Vulnerabilities (5.0.8)
CVE-2015-5461
CWE-601
High
WordPress Plugin YITH WooCommerce Ajax Search Unspecified Vulnerability (1.2.7)
-
-
High
WordPress Plugin Subscribe to Comments Local File Inclusion (2.1.2)
-
CWE-22
High
WordPress Plugin Swim Team Arbitrary File Download (1.44.1077)
CVE-2015-5471
CWE-22
High
WordPress Plugin The Events Calendar:Eventbrite Tickets Cross-Site Scripting (3.9.6)
CVE-2015-5485
CWE-79
High
WordPress Plugin XML Sitemap & Google News feeds Cross-Site Scripting (3.9)
-
CWE-79
High
WordPress Plugin WP User Frontend-Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Arbitrary File Upload (2.3.10)
-
CWE-434
High
WordPress Plugin WP e-Commerce Shop Styling Arbitrary File Download (2.5)
CVE-2015-5468
CWE-22
High
WordPress Plugin WP Ultimate Exporter Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin WP Subscribe Cross-Site Scripting (1.0.2)
-
CWE-79
High
WordPress Plugin WP Smart Image II Cross-Site Scripting (0.2)
-
CWE-79
High
WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Multiple Unspecified Vulnerabilities (4.6.8)
-
-
High
WordPress Plugin WP Review Multiple Unspecified Vulnerabilities (2.0)
-
-
High
WordPress Plugin WordPress Download Manager Cross-Site Scripting (2.7.94)
-
CWE-79
High
WordPress Plugin WP-PostRatings SQL Injection (1.83.1)
-
CWE-89
High
WordPress Plugin WordPress File Upload Multiple Vulnerabilities (2.7.6)
-
CWE-434
High
WordPress Plugin WP-Paginate Cross-Site Scripting (1.2.1)
-
CWE-79
High
WordPress Plugin WP-Invoice-Web Invoice and Billing Multiple Vulnerabilities (4.1.0)
-
CWE-264
High
WordPress Plugin WordPress Mobile Pack Information Disclosure (2.1.2)
CVE-2015-9269
CWE-200
High
WordPress Plugin WP Attachment Export Arbitrary File Download (0.2.3)
-
CWE-538
High
WordPress Plugin WP Google Maps Unspecified Vulnerability (6.2.1)
-
-
High
WordPress Plugin Bookmarkify Multiple Vulnerabilities (2.9.2)
-
CWE-352
High
WordPress Plugin Captain Slider Cross-Site Scripting (1.0.6)
-
CWE-79
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.1.5.2)
CVE-2015-9273
CWE-79
High
WordPress Plugin Simple Image Sizes Unspecified Vulnerability (2.2.4)
-
-
High
WordPress Plugin Slideshow Gallery LITE Unspecified Vulnerability (1.6.2)
-
-
High
WordPress Plugin Slider by 10Web-Responsive Image Slider Unspecified Vulnerability (1.1.9)
-
-
High
WordPress Plugin iframe Cross-Site Scripting (3.0)
-
CWE-79
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Unspecified Vulnerability (3.7.2)
-
-
High
WordPress Plugin Job Manager Cross-Site Scripting (0.7.24)
-
CWE-79
High
WordPress Plugin Simply Instagram Cross-Site Scripting (1.2.6)
-
CWE-79
High
WordPress Plugin Simple Sitemap-Create a Responsive HTML Sitemap Unspecified Vulnerability (1.53)
-
-
High
WordPress Plugin Job Manager Cross-Site Scripting (0.7.22)
CVE-2015-2321
CWE-79
High
WordPress Plugin Job Manager Security Bypass (0.7.25)
CVE-2015-6668
CWE-287
High
WordPress Plugin Livefyre Comments 3 Cross-Site Scripting (4.1.4)
-
CWE-79
High
WordPress Plugin MainWP Dashboard Unspecified Vulnerability (2.0.22)
-
-
High
WordPress Plugin MDC Private Message Cross-Site Scripting (1.0.0)
CVE-2015-6805
CWE-79
High
WordPress Plugin Monetize Multiple Vulnerabilities (1.03)
-
CWE-352
High
WordPress Plugin Social Media Share Buttons & Social Sharing Icons Multiple Unspecified Vulnerabilities (1.2.1)
-
-
High
WordPress Plugin Simple 301 Redirects by BetterLinks Unspecified Vulnerability (1.06)
-
-
High
WordPress Plugin MP3-jPlayer Information Disclosure (2.3.2)
CVE-2015-1000008
CWE-200
High
WordPress Plugin Sidebar Login Cross-Site Scripting (2.3.6)
-
CWE-79
High
WordPress Plugin SEO Ultimate Cross-Site Scripting (7.6.5.2)
-
CWE-79
High
WordPress Plugin Music Store Open Redirect (1.0.14)
-
CWE-601
High
WordPress Plugin Safe Redirect Manager SQL Injection (1.7.7)
-
CWE-89
High
WordPress Plugin Music Store Unspecified Vulnerability (1.0.20)
-
-
High
WordPress Plugin Navis DocumentCloud Cross-Site Scripting (0.1)
CVE-2015-2807
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.1.9)
-
CWE-22
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.9.21)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Unspecified Vulnerability (2.9.24)
-
-
High
WordPress Plugin Private Only Multiple Vulnerabilities (3.5.1)
CVE-2015-5483
CWE-352
High