Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Missing Update

This page lists 22224 vulnerabilities in this category.

Critical: 1394 High: 12186 Medium: 7891 Low: 749 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WordPress+Microsoft Office 365/Azure AD-LOGIN Cross-Site Scripting (15.3)
CVE-2021-43409
CWE-79
High
WordPress Plugin Advanced Forms for ACF Pro Security Bypass (1.6.8)
CVE-2021-24892
CWE-264
High
WordPress Plugin About Author Box Cross-Site Scripting (1.0.1)
CVE-2021-24745
CWE-79
High
WordPress Plugin YOP Poll Cross-Site Scripting (6.3.2)
-
CWE-79
High
WordPress Plugin WP Statistics SQL Injection (13.1.4)
CVE-2022-0513
CWE-89
High
WordPress Plugin WP Statistics Multiple Vulnerabilities (13.1.5)
CVE-2022-25307
CWE-89
High
WordPress Plugin WP Performance Score Booster-Optimize Speed, Enable Cache & Page Preload Cross-Site Request Forgery (2.0)
CVE-2021-24776
CWE-352
High
WordPress Plugin WP Fastest Cache Multiple Vulnerabilities (0.9.4)
CVE-2021-24870
CWE-352
High
WordPress Plugin Subscriptions & Memberships for PayPal Cross-Site Scripting (1.1.2)
-
CWE-79
High
WordPress Plugin Stylish Price List Security Bypass (6.8.14)
CVE-2021-24757
CWE-863
High
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (1.9.11)
CVE-2021-25017
CWE-79
High
WordPress Plugin Coming Soon, Under Construction & Maintenance Mode By Dazzler Unspecified Vulnerability (1.6.8)
-
-
High
WordPress Plugin Cool Tag Cloud Cross-Site Scripting (2.25)
CVE-2021-24682
CWE-79
High
WordPress Plugin Cookie Notification for WordPress-WP Cookie User Info includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Contact Form for WordPress-Ultimate Form Builder Lite includes Backdoor [Only if downloaded via the vendor website] (1.5.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin Connections Business Directory Unspecified Vulnerability (10.4.7)
-
-
High
WordPress Plugin Connections Business Directory CSV Injection (9.6)
CVE-2020-36503
CWE-1236
High
WordPress Plugin Connections Business Directory Cross-Site Scripting (10.4.2)
CVE-2021-24794
CWE-79
High
WordPress Plugin Comments Disable-AccessPress includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Coming Soon, Under Construction & Maintenance Mode By Dazzler Cross-Site Scripting (1.6.6)
CVE-2021-24539
CWE-79
High
WordPress Plugin CTA for WordPress-Easy Side Tab includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Check & Log Email SQL Injection (1.0.2)
CVE-2021-24774
CWE-89
High
WordPress Plugin Check & Log Email Cross-Site Scripting (1.0.3)
CVE-2021-24908
CWE-79
High
WordPress Plugin Cardinity Payment Gateway for WooCommerce Cross-Site Scripting (3.0.6)
-
CWE-79
High
WordPress Plugin Booking.com Product Helper Unspecified Vulnerability (1.0.3)
-
-
High
WordPress Plugin Booking.com Product Helper Cross-Site Scripting (1.0.1)
CVE-2021-24645
CWE-79
High
WordPress Plugin Booking.com Banner Creator Unspecified Vulnerability (1.4.5)
-
-
High
WordPress Plugin Booking.com Banner Creator Cross-Site Scripting (1.4.2)
CVE-2021-24646
CWE-79
High
WordPress Plugin Crisp Live Chat Cross-Site Request Forgery (0.31)
CVE-2021-43353
CWE-352
High
WordPress Plugin Custom Dashboard & Login Page-AGCA Cross-Site Scripting (6.9.1)
CVE-2021-36823
CWE-79
High
WordPress Plugin Beautiful Stat Counter for WordPress-Everest Counter Lite includes Backdoor [Only if downloaded via the vendor website] (2.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Embed Swagger Cross-Site Scripting (1.0.0)
CVE-2022-0381
CWE-79
High
WordPress Plugin Faster and Easier scroll to Top for WordPress-Smart Scroll to Top Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.3)
CVE-2021-24867
CWE-912
High
WordPress Plugin Far Future Expiry Header Cross-Site Request Forgery (1.4)
CVE-2021-24799
CWE-352
High
WordPress Plugin Export any WordPress data to XML/CSV Cross-Site Scripting (1.3.0)
CVE-2021-24708
CWE-79
High
WordPress Plugin Everest Review Lite-User/Admin review for WordPress includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Everest GPlaces Business Reviews includes Backdoor [Only if downloaded via the vendor website] (1.0.9)
CVE-2021-24867
CWE-912
High
WordPress Plugin Events Made Easy SQL Injection (2.2.35)
CVE-2021-25030
CWE-89
High
WordPress Plugin Events Made Easy Cross-Site Scripting (2.2.23)
CVE-2021-24813
CWE-79
High
WordPress Plugin Effectively Add & Customize Free Icons For WordPress Menus-WP Menu Icons Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.8)
CVE-2021-24867
CWE-912
High
WordPress Plugin Discounts Manager for Products Cross-Site Scripting (3.4.4)
-
CWE-79
High
WordPress Plugin Easy PayPal Events Unspecified Vulnerability (1.1.6)
-
-
High
WordPress Plugin Easy PayPal Events Cross-Site Scripting (1.1.1)
-
CWE-79
High
WordPress Plugin Easy Media Download Cross-Site Scripting (1.1.6)
CVE-2021-24699
CWE-79
High
WordPress Plugin Easiest Contact Form for WordPress-AP Contact Form includes Backdoor [Only if downloaded via the vendor website] (1.0.6)
CVE-2021-24867
CWE-912
High
WordPress Plugin Duplicate Post SQL Injection (1.1.9)
CVE-2021-43408
CWE-89
High
WordPress Plugin Download Monitor Unspecified Vulnerability (4.4.6)
-
-
High
WordPress Plugin Download Monitor SQL Injection (4.4.4)
CVE-2021-24786
CWE-89
High
WordPress Plugin Better Messages-Live Chat for WordPress, BuddyPress, BuddyBoss, Ultimate Member Multiple Vulnerabilities (1.9.9.37)
CVE-2021-24809
CWE-352
High
WordPress Plugin Beautiful FAQ for WordPress-Everest FAQ Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.8)
CVE-2021-24867
CWE-912
High
WordPress Plugin Flat Preloader Cross-Site Request Forgery (1.5.3)
CVE-2021-24685
CWE-352
High
WordPress Plugin WordPress PDF Light Viewer Command Injection (1.4.11)
CVE-2021-24684
CWE-94
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cross-Site Request Forgery (3.0.8)
CVE-2021-24766
CWE-352
High
WordPress Plugin 3DPrint Lite Cross-Site Scripting (1.9.1.5)
-
CWE-79
High
WordPress Plugin YITH WooCommerce Product Add-Ons Multiple Vulnerabilities (2.0.7)
-
CWE-79
High
WordPress Plugin YITH WooCommerce Product Add-Ons Cross-Site Scripting (2.2.2)
-
CWE-79
High
WordPress Plugin WP Import Export Lite Security Bypass (3.9.4)
-
CWE-284
High
WordPress Plugin WP Import Export Lite Information Disclosure (3.9.15)
CVE-2022-0236
CWE-200
High
WordPress Plugin Wp Cookie Choice Cross-Site Request Forgery (1.1.0)
CVE-2021-24595
CWE-352
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Unspecified Vulnerability (1.2.6.2)
-
-
High
WordPress Plugin Accept Donations with PayPal Cross-Site Request Forgery (1.3)
CVE-2021-24572
CWE-352
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Unspecified Vulnerability (1.2.6.1)
-
-
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Unspecified Vulnerability (1.2.6)
-
-
High
WordPress Plugin WooCommerce EnvioPack Cross-Site Scripting (1.2)
CVE-2021-39314
CWE-79
High
WordPress Plugin Wechat Reward Cross-Site Request Forgery (1.7)
CVE-2021-24615
CWE-352
High
WordPress Plugin Variation Swatches for WooCommerce Cross-Site Scripting (2.1.1)
CVE-2021-42367
CWE-79
High
WordPress Plugin Tutor LMS-eLearning and online course solution Multiple Cross-Site Scripting Vulnerabilities (1.9.8)
CVE-2021-24740
CWE-79
High
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (1.9.10)
CVE-2021-24873
CWE-79
High
WordPress Plugin Accept Donations with PayPal Cross-Site Request Forgery (1.3.3)
CVE-2021-24989
CWE-352
High
WordPress Plugin Accept Donations with PayPal Cross-Site Scripting (1.3.1)
CVE-2021-24815
CWE-79
High
WordPress Plugin Batch Cat Security Bypass (0.3)
CVE-2021-24788
CWE-264
High
WordPress Plugin AdSanity Arbitrary File Upload (1.8.1)
-
CWE-434
High
WordPress Plugin Badge Designer Lite For WooCommerce includes Backdoor [Only if downloaded via the vendor website] (1.1.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin AutomatorWP-The most flexible and powerful no-code automation for WordPress Security Bypass (1.7.5)
CVE-2021-24717
CWE-863
High
WordPress Plugin AP Companion includes Backdoor [Only if downloaded via the vendor website] (1.0.6)
CVE-2021-24867
CWE-912
High