Invicti named a Leader in IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Read now.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
MSSP
Partners
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ SQL Injection
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
SQL Injection
This page lists
838 vulnerabilities
in this category.
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Multi Feed Reader SQL Injection (2.2.3)
CVE-2017-2195
CWE-89
High
WordPress Plugin Product Catalog SQL Injection (4.2.2)
-
CWE-89
High
WordPress Plugin Save Contact Form 7 SQL Injection (1.7)
-
CWE-89
High
WordPress Plugin Simple Login Log SQL Injection (1.1.1)
-
CWE-89
High
WordPress Plugin WP Jobs SQL Injection (1.4)
CVE-2017-9603
CWE-89
High
WordPress Plugin WP-Testimonials SQL Injection (3.4.1)
CVE-2017-9418
CWE-89
High
WordPress Plugin Add Edit Delete Listing Module SQL Injection (1.0)
CVE-2017-1002025
CWE-89
High
WordPress Plugin DSubscribers SQL Injection (1.2)
-
CWE-89
High
WordPress Plugin Event Espresso Lite-Event Management and Registration System SQL Injection (3.1.37.11)
CVE-2017-1002026
CWE-89
High
WordPress Plugin WP Statistics SQL Injection (12.0.7)
-
CWE-89
High
WordPress Plugin ACF:Better Search SQL Injection (2.0.2)
-
CWE-89
High
WordPress Plugin Gallery transformation SQL Injection (1.0)
CVE-2017-1002028
CWE-89
High
WordPress Plugin I Recommend This SQL Injection (3.7.7)
-
CWE-89
High
WordPress Plugin Link Library SQL Injection (5.9.13.26)
-
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.3.50)
CVE-2017-12977
CWE-89
High
WordPress Plugin Podlove Podcast Publisher SQL Injection (2.5.3)
CVE-2017-12949
CWE-89
High
WordPress Plugin RK Responsive Contact Form SQL Injection (1.0.0)
CVE-2017-1002027
CWE-89
High
WordPress Plugin Content Timeline Multiple SQL Injection Vulnerabilities (4.4.2)
CVE-2017-14507
CWE-89
High
WordPress Plugin Gallery-Image and Video Gallery with Thumbnails SQL Injection (1.2.0)
CVE-2017-14125
CWE-89
High
WordPress Plugin Event Espresso Lite-Event Management and Registration System SQL Injection (3.1.37.12)
CVE-2017-14760
CWE-89
High
WordPress Plugin FormCraft-Contact Form Builder SQL Injection (1.0.5)
CVE-2017-13137
CWE-89
High
WordPress Plugin WatuPRO SQL Injection (5.5.3.6)
CVE-2017-9834
CWE-89
High
WordPress Plugin Active Directory Integration SQL Injection (1.1.8)
-
CWE-89
High
WordPress Plugin bbPress SQL Injection (2.5.14)
-
CWE-89
High
WordPress Plugin Events SQL Injection (2.3.4)
-
CWE-89
High
WordPress Plugin InLinks SQL Injection (1.0)
CVE-2017-16955
CWE-89
High
WordPress Plugin JTRT Responsive Tables SQL Injection (4.1)
-
CWE-89
High
WordPress Plugin Poll, Survey, Questionnaire and Voting system SQL Injection (1.2.4)
-
CWE-89
High
WordPress Plugin Simple Events Calendar SQL Injection (1.3.5)
-
CWE-89
High
WordPress Plugin Booking Calendar SQL Injection (6.2.2)
-
CWE-89
High
WordPress Plugin WordPress Clean Up & Optimizer-Clean Up Optimizer SQL Injection (3.0.13)
-
CWE-89
High
WordPress Plugin Dbox 3D Slider Lite SQL Injection (1.2.2)
CVE-2018-5374
CWE-89
High
WordPress Plugin Smooth Slider SQL Injection (2.8.6)
CVE-2018-5373
CWE-89
High
WordPress Plugin Testimonial Slider SQL Injection (1.2.4)
CVE-2018-5372
CWE-89
High
WordPress Plugin Ultimate Membership Pro SQL Injection (6.4)
-
CWE-89
High
WordPress Plugin User Control SQL Injection (2.1.0)
-
CWE-89
High
WordPress Plugin WP Events Calendar SQL Injection (1.0)
CVE-2018-5315
CWE-89
High
WordPress Plugin YITH WooCommerce Wishlist SQL Injection (2.1.2)
-
CWE-89
High
WordPress Plugin Custom Permalinks SQL Injection (1.1)
-
CWE-89
High
WordPress Plugin Relevanssi-A Better Search SQL Injection (3.6.0)
-
CWE-89
High
WordPress Plugin wpForo Forum SQL Injection (1.4.9)
CVE-2018-11515
CWE-89
High
WordPress Plugin iThemes Security (formerly Better WP Security) SQL Injection (7.0.2)
CVE-2018-12636
CWE-89
High
WordPress Plugin Page Visit Counter SQL Injection (4.0.9)
-
CWE-89
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction SQL Injection (3.0.9)
CVE-2018-10969
CWE-89
High
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease SQL Injection (4.0.4)
-
CWE-89
High
WordPress Plugin Chained Quiz SQL Injection (1.0.8)
-
CWE-89
High
WordPress Plugin Gift Vouchers (Gift Cards and Packages) (WooCommerce Supported) SQL Injection (1.0.5)
CVE-2018-16159
CWE-89
High
WordPress Plugin Image Intense SQL Injection (3.2.5)
-
CWE-89
High
WordPress Plugin wp-autosuggest SQL Injection (0.24)
-
CWE-89
High
WordPress Plugin Adicon Server SQL Injection (1.2)
-
CWE-89
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress SQL Injection (3.3.21.1)
CVE-2019-15025
CWE-89
High
WordPress Plugin WP Fastest Cache SQL Injection (0.8.7.4)
-
CWE-89
High
WordPress Plugin Accessibility Suite by Online ADA SQL Injection (2.0.10)
-
CWE-89
High
WordPress Plugin Booking Calendar SQL Injection (8.4.4)
CVE-2018-20556
CWE-89
High
WordPress Plugin Entries For WPForms SQL Injection (1.4.0)
-
CWE-89
High
WordPress Plugin JS Help Desk (formerly JS Support Ticket) SQL Injection (2.1.0)
-
CWE-89
High
WordPress Plugin Better Search SQL Injection (2.2.2)
-
CWE-89
High
WordPress Plugin Blogger To WordPress SQL Injection (2.2.1)
-
CWE-89
High
WordPress Plugin Advanced Contact form 7 DB SQL Injection (1.6.0)
-
CWE-89
High
WordPress Plugin Duplicate Page SQL Injection (3.3)
-
CWE-89
High
WordPress Plugin Simple Ajax Shoutbox SQL Injection (2.2.1)
-
CWE-89
High
WordPress Plugin WP Google Maps SQL Injection (7.11.17)
CVE-2019-10692
CWE-89
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder SQL Injection (1.13.3)
CVE-2019-10866
CWE-89
High
WordPress Plugin RSVPMaker SQL Injection (5.6.3)
CVE-2018-21004
CWE-89
High
WordPress Plugin AdRotate-Ad manager & AdSense Ads SQL Injection (5.2)
CVE-2019-13570
CWE-89
High
WordPress Plugin Advanced Contact form 7 DB SQL Injection (1.6.1)
CVE-2019-13571
CWE-89
High
WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler SQL Injection (5.5.0)
CVE-2019-13572
CWE-89
High
WordPress Plugin Contact Form, Drag and Drop Form Builder for WordPress-Everest Forms SQL Injection (1.4.9)
CVE-2019-13575
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (4.1.7)
CVE-2019-13569
CWE-89
High
WordPress Plugin FV Flowplayer Video Player SQL Injection (7.3.18.727)
CVE-2019-13573
CWE-89
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.5.30)
CVE-2019-14313
CWE-89
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction SQL Injection (3.1.1)
CVE-2019-15659
CWE-89
High
WordPress Plugin Server Status by Hostname/IP SQL Injection (4.6)
CVE-2019-12570
CWE-89
High
WordPress Plugin WebLibrarian SQL Injection (3.5.4)
CVE-2019-1010034
CWE-89
High
WordPress Plugin WP Statistics SQL Injection (12.6.6.1)
CVE-2019-13275
CWE-89
High
«
1
...
6
7
8
...
12
»