Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Sensitive Information Disclosure Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Xss - Known Vulnerabilities Vulnerability Name CVE CWE CWE Severity WordPress Plugin Lightbox Gallery Cross-Site Scripting (0.9.4) CVE-2022-4682 CWE-79 CWE-79 High WordPress Plugin Lightbox Jquery Possible Remote Code Execution (0.24) CWE-94 CWE-94 High WordPress Plugin Lightbox Multiple Unspecified Vulnerabilities (2.0.7) High WordPress Plugin Lightbox Multiple Vulnerabilities (1.6.6) CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin Lightbox Photo Gallery Cross-Site Request Forgery (1.0) CVE-2014-9441 CWE-352 CWE-352 High WordPress Plugin Lightbox Plus Colorbox Cross-Site Scripting (2.7.2) CWE-79 CWE-79 High WordPress Plugin Light Messages Cross-Site Request Forgery (1.0) CVE-2021-24535 CWE-352 CWE-352 High WordPress Plugin Light Post 'abspath' Parameter Remote File Include (1.4) CWE-94 CWE-94 High WordPress Plugin Lightweight Accordion Cross-Site Scripting (1.5.14) CVE-2023-0373 CWE-79 CWE-79 High WordPress Plugin Lightweight Sidebar Manager Cross-Site Request Forgery (1.1.4) CWE-352 CWE-352 High WordPress Plugin Like Button Rating-LikeBtn Security Bypass (2.5.3) CWE-264 CWE-264 High WordPress Plugin Like Button Rating-LikeBtn Server-Side Request Forgery (2.6.31) CVE-2021-24150 CWE-918 CWE-918 High WordPress Plugin Like Dislike Counter SQL Injection (1.2.3) CWE-89 CWE-89 High WordPress Plugin Lim4wp 'upload.php' Arbitrary File Upload (1.1.1) CWE-434 CWE-434 High WordPress Plugin Limit Attempts by BestWebSoft Cross-Site Scripting (1.1.7) CVE-2017-2171 CWE-79 CWE-79 High WordPress Plugin Limit Attempts by BestWebSoft Multiple Vulnerabilities (1.0.3) CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin Limit Attempts by BestWebSoft SQL Injection (1.1.0) CWE-89 CWE-89 High WordPress Plugin Limit Login Attempts Cross-Site Scripting (1.7.1) CVE-2023-1912 CWE-79 CWE-79 High WordPress Plugin Limit Login Attempts Cross-Site Scripting (4.0.43) CVE-2021-24657 CWE-79 CWE-79 High WordPress Plugin Limit Login Attempts Reloaded Cross-Site Scripting (2.7.0) CWE-79 CWE-79 High WordPress Plugin Limit Login Attempts Reloaded Cross-Site Scripting (2.15.2) CVE-2020-35589 CWE-79 CWE-79 High WordPress Plugin Limit Login Attempts Reloaded Security Bypass (2.7.4) CWE-264 CWE-264 High WordPress Plugin Limit Login Attempts Reloaded Security Bypass (2.17.3) CVE-2020-35590 CWE-264 CWE-264 High WordPress Plugin Limit Login Attempts Security Bypass (1.7.0) CWE-264 CWE-264 High WordPress Plugin Lingotek Translation Multiple Cross-Site Scripting Vulnerabilities (1.1.8) CWE-79 CWE-79 High WordPress Plugin link-list-manager Cross-Site Scripting (1.0) CVE-2021-39311 CWE-79 CWE-79 High WordPress Plugin LinkedIn by BestWebSoft Cross-Site Scripting (1.0.4) CVE-2017-2171 CVE-2017-2171 CVE-2017-18516 CWE-79 CWE-79 High WordPress Plugin Link Juice Keeper Cross-Site Scripting (2.0.2) CVE-2023-25793 CWE-79 CWE-79 High WordPress Plugin Link Library 'id' Parameter Cross-Site Scripting and SQL Injection Vulnerabilities (5.0.8) CWE-79 CWE-89 CWE-79 CWE-89 High WordPress Plugin Link Library 'searchll' Parameter SQL Injection (5.2.1) CWE-89 CWE-89 High WordPress Plugin Link Library Cross-Site Scripting (5.8.10.6) CWE-79 CWE-79 High WordPress Plugin Link Library Cross-Site Scripting (5.9.5.5) CWE-79 CWE-79 High WordPress Plugin Link Library Cross-Site Scripting (5.9.12.29) CWE-79 CWE-79 High WordPress Plugin Link Library SQL Injection (5.9.13.26) CWE-89 CWE-89 High WordPress Plugin Link Log-external link click monitor SQL Injection (2.0) CVE-2015-9344 CWE-89 CWE-89 High WordPress Plugin Link Optimizer Lite Cross-Site Request Forgery (1.4.5) CVE-2022-2540 CWE-352 CWE-352 High WordPress Plugin LionScripts:IP Blocker Lite Cross-Site Request Forgery (10.3) CWE-352 CWE-352 High WordPress Plugin LIQUID SPEECH BALLOON Cross-Site Scripting (1.0.6) CVE-2019-17070 CWE-79 CWE-79 High WordPress Plugin LISL Last-Image Slider TimThumb Arbitrary File Upload (1.0) CVE-2011-4106 CWE-20 CWE-20 High WordPress Plugin Listing, Classified Ads & Business Directory-uListing Arbitrary File Upload (1.2.1) CWE-434 CWE-434 High WordPress Plugin Listing, Classified Ads & Business Directory-uListing Cross-Site Request Forgery (2.0.8) CWE-352 CWE-352 High WordPress Plugin Listing, Classified Ads & Business Directory-uListing Multiple Vulnerabilities (1.6.6) CWE-89 CWE-264 CWE-89 CWE-264 High WordPress Plugin Listing, Classified Ads & Business Directory-uListing Multiple Vulnerabilities (2.0.5) CVE-2021-36874 CVE-2021-36875 CVE-2021-36876 CVE-2021-36877 CVE-2021-36878 CVE-2021-36879 CWE-79 CWE-264 CWE-352 CWE-79 CWE-264 CWE-352 High WordPress Plugin Listing, Classified Ads & Business Directory-uListing SQL Injection (2.0.3) CVE-2021-36880 CWE-89 CWE-89 High WordPress Plugin ListingPro Local File Inclusion (2.9.3) CVE-2024-39619 CWE-22 CWE-22 High WordPress Plugin ListingPro SQL Injection (2.9.3) CVE-2024-38795 CWE-89 CWE-89 High WordPress Plugin List Pages Shortcode Cross-Site Scripting (1.7.4) CVE-2022-4757 CWE-79 CWE-79 High WordPress Plugin LiteSpeed Cache Cross-Site Scripting (3.6) CVE-2020-29172 CWE-79 CWE-79 High WordPress Plugin LittleBot ACH for Stripe + Plaid Unspecified Vulnerability (1.2.6) High WordPress Plugin Live Chat-Live support Cross-Site Request Forgery (3.1.0) CVE-2020-5642 CWE-352 CWE-352 High WordPress Plugin LiveChat-WP live chat Cross-Site Scripting (3.7.3) CWE-79 CWE-79 High WordPress Plugin Live Chat for Fanpage Cross-Site Scripting (2.0.1) CVE-2021-24435 CWE-79 CWE-79 High WordPress Plugin Live Chat Unlimited Cross-Site Scripting (2.8.3) CWE-79 CWE-79 High WordPress Plugin Live Chat with Facebook Messenger Cross-Site Scripting (1.4.4) CWE-79 CWE-79 High WordPress Plugin Live Comment Preview Cross-Site Scripting (2.0.2) CWE-79 CWE-79 High WordPress Plugin Live Forms-Visual Form Builder SQL Injection (3.0.1) CWE-89 CWE-89 High WordPress Plugin Livefyre Comments 3 Cross-Site Scripting (4.1.4) CWE-79 CWE-79 High WordPress Plugin LiveGrounds 'uid' Parameter Cross-Site Scripting (0.42) CWE-79 CWE-79 High WordPress Plugin Livemesh Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (6.7.1) CVE-2021-24260 CWE-79 CWE-79 High WordPress Plugin Livemesh Addons for Elementor Security Bypass (2.5.2) CWE-264 CWE-264 High WordPress Plugin Livemesh SiteOrigin Widgets Security Bypass (2.5.1) CWE-264 CWE-264 High WordPress Plugin Live Product Editor for WooCommerce Security Bypass (4.6.2) CWE-264 CWE-264 High WordPress Plugin Live Scores for SportsPress Multiple Vulnerabilities (1.9.0) CWE-22 CWE-79 CWE-22 CWE-79 High WordPress Plugin Live Search for WooCommerce Security Bypass (2.0.2) CWE-264 CWE-264 High WordPress Plugin LiveSig 'wp-root' Parameter Remote File Include (0.4) CWE-94 CWE-94 High WordPress Plugin Loan Comparison Multiple Cross-Site Scripting Vulnerabilities (1.5.2) CVE-2023-0366 CVE-2023-0442 CWE-79 CWE-79 High WordPress Plugin Localize My Post Local File Inclusion (1.0) CVE-2018-16299 CWE-22 CWE-22 High WordPress Plugin Local Market Explorer 'api-key' Parameter Cross-Site Scripting (3.1.1) CWE-79 CWE-79 High WordPress Plugin Local Weather Cross-Site Scripting (1.0) CVE-2014-4561 CWE-79 CWE-79 High WordPress Plugin Locations Cross-Site Request Forgery (3.2.1) CWE-352 CWE-352 High WordPress Plugin Location Weather Cross-Site Scripting (1.3.3) CVE-2023-0360 CWE-79 CWE-79 High WordPress Plugin Locatoraid Store Locator Cross-Site Request Forgery (3.9.11) CVE-2023-25709 CWE-352 CWE-352 High WordPress Plugin Lockdown WP Admin Unspecified Vulnerability (1.1.2) High WordPress Plugin Loco Translate Local File Inclusion (2.2.1) CWE-22 CWE-22 High WordPress Plugin Loco Translate PHP Code Injection (2.5.3) CVE-2021-24721 CWE-95 CWE-95 High 1...107108109110...169 108 / 169
