Invicti named a Leader in IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Read now.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
MSSP
Partners
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ XSS
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
XSS
This page lists
3368 vulnerabilities
in this category.
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Scripting (1.15.2)
CVE-2021-24700
CWE-79
High
WordPress Plugin GenerateBlocks Cross-Site Scripting (1.3.5)
CVE-2021-24751
CWE-79
High
WordPress Plugin Header Footer Code Manager Cross-Site Scripting (1.1.16)
CVE-2022-0710
CWE-79
High
WordPress Plugin Ibtana-Ecommerce Product Addons Cross-Site Scripting (0.2.3)
-
CWE-79
High
WordPress Plugin Import any XML or CSV File to WordPress Cross-Site Scripting (3.6.2)
CVE-2021-24714
CWE-79
High
WordPress Plugin Ivory Search-WordPress Search Cross-Site Scripting (4.7.1)
-
CWE-79
High
WordPress Plugin Ivory Search-WordPress Search Cross-Site Scripting (4.6.6)
CVE-2021-36869
CWE-79
High
WordPress Plugin Ivory Search-WordPress Search Multiple Cross-Site Scripting Vulnerabilities (5.4)
CVE-2021-25105
CWE-79
High
WordPress Plugin Media Tags Cross-Site Scripting (3.2.0.2)
CVE-2021-24899
CWE-79
High
WordPress Plugin My Calendar Cross-Site Scripting (3.2.17)
CVE-2021-24927
CWE-79
High
WordPress Plugin myCred-Points, Rewards, Gamification, Ranks, Badges & Loyalty Cross-Site Scripting (2.3.2)
CVE-2021-25015
CWE-79
High
WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (4.3.23)
CVE-2021-24975
CWE-79
High
WordPress Plugin Ninja Forms with File Uploads Extension Cross-Site Scripting (3.3.12)
CVE-2022-0889
CWE-79
High
WordPress Plugin Photoswipe Masonry Gallery Cross-Site Scripting (1.2.14)
CVE-2022-0750
CWE-79
High
WordPress Plugin Registrations for the Events Calendar-Event Registration Cross-Site Scripting (2.7.4)
CVE-2021-24876
CWE-79
High
WordPress Plugin Registrations for the Events Calendar-Event Registration Cross-Site Scripting (2.7.9)
CVE-2021-25083
CWE-79
High
WordPress Plugin Shop Page WP Cross-Site Scripting (1.2.7)
CVE-2021-24811
CWE-79
High
WordPress Plugin Slideshow Gallery LITE Cross-Site Scripting (1.7.3)
CVE-2021-24882
CWE-79
High
WordPress Plugin Smash Balloon Social Post Feed Cross-Site Scripting (4.1)
CVE-2021-25065
CWE-79
High
WordPress Plugin Social Sharing-Sassy Social Share Cross-Site Scripting (3.3.25)
-
CWE-79
High
WordPress Plugin Stylish Cost Calculator Cross-Site Scripting (7.0.3)
CVE-2021-24822
CWE-79
High
WordPress Plugin Video Lessons Manager-Best Video Course LMS Cross-Site Scripting (1.7.1)
CVE-2021-24713
CWE-79
High
WordPress Plugin Video Lessons Manager-Video Lessons LMS for eLearning Site Cross-Site Scripting (3.5.8)
CVE-2021-24713
CWE-79
High
WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Cross-Site Scripting (4.19.1)
CVE-2021-24768
CWE-79
High
WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Cross-Site Scripting (4.19.2)
CVE-2021-24988
CWE-79
High
WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Cross-Site Scripting (4.19.3)
CVE-2022-0189
CWE-79
High
WordPress Plugin WP Spell Check Cross-Site Scripting (9.2)
-
CWE-79
High
WordPress Plugin Autoptimize Cross-Site Scripting (3.1.0)
CVE-2022-2635
CWE-79
High
WordPress Plugin Download Manager Cross-Site Scripting (3.2.46)
CVE-2022-2101
CWE-79
High
WordPress Plugin Download Manager Multiple Cross-Site Scripting Vulnerabilities (3.2.48)
-
CWE-79
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.1.3)
-
CWE-79
High
WordPress Plugin Simple Banner Cross-Site Scripting (2.11.0)
CVE-2022-2515
CWE-79
High
WordPress Plugin Simple SEO Cross-Site Scripting (1.7.91)
CVE-2022-1628
CWE-79
High
WordPress Plugin WP-UserOnline Cross-Site Scripting (2.87.6)
CVE-2022-2473
CWE-79
High
WordPress Plugin WP-UserOnline Cross-Site Scripting (2.88.0)
CVE-2022-2941
CWE-79
High
WordPress Plugin All-in-One WP Migration Cross-Site Scripting (7.62)
CVE-2022-2546
CWE-79
High
WordPress Plugin Beaver Builder-WordPress Page Builder Multiple Cross-Site Scripting Vulnerabilities (2.5.5.2)
CVE-2022-2934
CWE-79
High
WordPress Plugin Calendar Event Multi View Cross-Site Scripting (1.3.99)
CVE-2021-24498
CWE-79
High
WordPress Plugin Classified Listing-Classified ads & Business Directory Cross-Site Scripting (2.2.13)
CVE-2022-2654
CWE-79
High
WordPress Plugin Classified Listing Pro & Directory Cross-Site Scripting (2.0.19)
CVE-2022-2655
CWE-79
High
WordPress Plugin Classified Listing Store & Membership Cross-Site Scripting (1.4.19)
CVE-2022-2654
CWE-79
High
WordPress Plugin Contact Form DB-Elementor Cross-Site Scripting (1.7)
CVE-2022-2116
CWE-79
High
WordPress Plugin Donation Thermometer Cross-Site Scripting (2.1.2)
CVE-2022-3128
CWE-79
High
WordPress Plugin Download Manager Cross-Site Scripting (3.2.42)
CVE-2022-1985
CWE-79
High
WordPress Plugin Download Manager Cross-Site Scripting (3.2.52)
-
CWE-79
High
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Cross-Site Scripting (1.3.6.2)
CVE-2022-0595
CWE-79
High
WordPress Plugin DSGVO All in one for WP Cross-Site Scripting (4.1)
-
CWE-79
High
WordPress Plugin Easy Org Chart Cross-Site Scripting (3.1)
CVE-2022-36355
CWE-79
High
WordPress Plugin Easy SVG Support Cross-Site Scripting (3.2.0)
CVE-2022-1964
CWE-79
High
WordPress Plugin Elementor Website Builder Cross-Site Scripting (3.5.5)
CVE-2022-29455
CWE-79
High
WordPress Plugin Float to Top Button Cross-Site Scripting (2.3.6)
CVE-2022-2709
CWE-79
High
WordPress Plugin Form Builder CP Cross-Site Scripting (1.2.31)
CVE-2022-2567
CWE-79
High
WordPress Plugin Generate PDF using Contact Form 7 Cross-Site Scripting (3.5)
CVE-2022-3070
CWE-79
High
WordPress Plugin Gettext override translations Cross-Site Scripting (1.0.1)
CVE-2022-3036
CWE-79
High
WordPress Plugin Goolytics-Simple Google Analytics Cross-Site Scripting (1.1.1)
CVE-2022-3132
CWE-79
High
WordPress Plugin GTM4WP Cross-Site Scripting (1.15)
CVE-2022-1707
CWE-79
High
WordPress Plugin GTM4WP Cross-Site Scripting (1.15.1)
CVE-2022-1961
CWE-79
High
WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Cross-Site Scripting (9.7.0)
CVE-2021-25031
CWE-79
High
WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Cross-Site Scripting (9.7.1)
CVE-2022-29424
CWE-79
High
WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Multiple Cross-Site Scripting Vulnerabilities (9.7.3)
CVE-2022-2937
CWE-79
High
WordPress Plugin Keep Backup Daily Cross-Site Scripting (2.0.2)
CVE-2022-1820
CWE-79
High
WordPress Plugin Meks Easy Social Share Cross-Site Scripting (1.2.7)
CVE-2022-2574
CWE-79
High
WordPress Plugin Rezgo Online Booking Cross-Site Scripting (4.1.7)
CVE-2022-1932
CWE-79
High
WordPress Plugin Scroll To Top Cross-Site Scripting (1.4.0)
CVE-2022-2710
CWE-79
High
WordPress Plugin SEO Smart Links Cross-Site Scripting (3.0.1)
CVE-2022-3135
CWE-79
High
WordPress Plugin Simple File List Cross-Site Scripting (4.4.11)
CVE-2022-3062
CWE-79
High
WordPress Plugin Slickr Flickr Cross-Site Scripting (2.8.1)
CVE-2022-3021
CWE-79
High
WordPress Plugin Slider Hero with Animation, Video Background Cross-Site Scripting (8.4.3)
CVE-2022-3074
CWE-79
High
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk Multiple Cross-Site Scripting Vulnerabilities (5.173)
CVE-2022-28222
CWE-79
High
WordPress Plugin Sticky Popup Cross-Site Scripting (1.2)
CVE-2022-1750
CWE-79
High
WordPress Plugin SVG Support Cross-Site Scripting (2.4.2)
CVE-2022-1755
CWE-79
High
WordPress Plugin SVG Support Cross-Site Scripting (2.3.19)
CVE-2021-24686
CWE-79
High
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (1.9.1)
CVE-2021-24455
CWE-79
High
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (2.0.9)
CVE-2022-2563
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.4.0)
-
CWE-79
High
«
1
...
38
39
40
...
45
»