Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Sensitive Information Disclosure Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Xss - Known Vulnerabilities Vulnerability Name CVE CWE CWE Severity WordPress Plugin Sticky Popup Cross-Site Scripting (1.2) CVE-2022-1750 CWE-79 CWE-79 High WordPress Plugin Sticky Related Posts Cross-Site Scripting (1.0) CVE-2021-24435 CWE-79 CWE-79 High WordPress Plugin stm-megamenu Local File Inclusion (2.3.12) CVE-2024-35677 CWE-22 CWE-22 High WordPress Plugin Stockdio Historical Chart Cross-Site Scripting (2.7.2) CVE-2020-28707 CWE-79 CWE-79 High WordPress Plugin Stock in & out Cross-Site Scripting (1.0.4) CVE-2021-24346 CWE-79 CWE-79 High WordPress Plugin Stock in & out SQL Injection (1.0.4) CWE-89 CWE-89 High WordPress Plugin Stockists Manager for Woocommerce Cross-Site Request Forgery (1.0.2.1) CVE-2022-2518 CWE-352 CWE-352 High WordPress Plugin Stock market charts from finviz Cross-Site Scripting (1.0) CVE-2023-23809 CWE-79 CWE-79 High WordPress Plugin Stock Ticker Security Bypass (3.23.0) CVE-2023-27626 CWE-284 CWE-284 High WordPress Plugin Stop Spammers Security-Block Spam Users, Comments, Forms Cross-Site Scripting (6.15) CWE-79 CWE-79 High WordPress Plugin Stop Spammers Security-Block Spam Users, Comments, Forms Cross-Site Scripting (2021.8) CVE-2021-24245 CWE-79 CWE-79 High WordPress Plugin Stop Spammers Security-Block Spam Users, Comments, Forms Cross-Site Scripting (2021.17) CVE-2021-24517 CWE-79 CWE-79 High WordPress Plugin Stop User Enumeration Cross-Site Scripting (1.3.7) CVE-2017-18536 CWE-79 CWE-79 High WordPress Plugin Stop User Enumeration Security Bypass (1.3.18) CWE-264 CWE-264 High WordPress Plugin Stop User Enumeration User Enumeration (1.2.4) CWE-203 CWE-203 High WordPress Plugin Stop User Enumeration User Enumeration (1.3.4) CWE-203 CWE-203 High WordPress Plugin Stop User Enumeration User Enumeration (1.3.8) CWE-203 CWE-203 High WordPress Plugin Storefront Footer Text Cross-Site Scripting (1.0.1) CVE-2021-24607 CWE-79 CWE-79 High WordPress Plugin Store Locator for WordPress with Google Maps-LotsOfLocales Cross-Site Request Forgery (3.98.7) CWE-352 CWE-352 High WordPress Plugin Store Locator for WordPress with Google Maps-LotsOfLocales SQL Injection (3.11) CVE-2014-8621 CWE-89 CWE-89 High WordPress Plugin Store Locator for WordPress with Google Maps-LotsOfLocales SQL Injection (3.33.1) CWE-89 CWE-89 High WordPress Plugin Store Locator Plus for WordPress Cross-Site Scripting (4.5.10) CWE-79 CWE-79 High WordPress Plugin Store Locator Plus for WordPress Cross-Site Scripting (5.5.15) CVE-2021-24290 CWE-79 CWE-79 High WordPress Plugin Store Locator Plus for WordPress Multiple Vulnerabilities (3.0.1) CWE-89 CWE-200 CWE-89 CWE-200 High WordPress Plugin Store Locator Plus for WordPress Open Email Relay (4.2.25) CWE-264 CWE-264 High WordPress Plugin Store Locator Plus for WordPress Privilege Escalation (5.5.14) CVE-2021-24289 CWE-264 CWE-264 High WordPress Plugin Store Locator Plus for WordPress SQL Injection (3.8.6) CWE-89 CWE-89 High WordPress Plugin StoryChief Cross-Site Scripting (1.0.30) CWE-79 CWE-79 High WordPress Plugin StreamCast-Radio Player for WordPress Cross-Site Scripting (2.1) CVE-2021-24416 CWE-79 CWE-79 High WordPress Plugin Stream Cross-Site Scripting (3.0.5) CWE-79 CWE-79 High WordPress Plugin Stream SQL Injection (3.8.1) CVE-2021-24772 CWE-89 CWE-89 High WordPress Plugin Stream Video Player Cross-Site Request Forgery (1.4.0) CVE-2013-2706 CWE-352 CWE-352 High WordPress Plugin String locator PHAR Deserialization (2.5.0) CVE-2022-2434 CWE-502 CWE-502 High WordPress Plugin Stripe For WooCommerce Security Bypass (3.3.9) CVE-2021-39347 CWE-264 CWE-264 High WordPress Plugin Stripe Payment for WooCommerce Cross-Site Scripting (3.5.9) CWE-79 CWE-79 High WordPress Plugin Stripe Payment for WooCommerce Security Bypass (3.7.7) CVE-2023-3162 CWE-639 CWE-639 High WordPress Plugin Stripe Payment for WooCommerce Security Bypass (3.7.9) CVE-2023-4040 CWE-862 CWE-862 High WordPress Plugin Stripe Payments Cross-Site Scripting (2.0.39) CWE-79 CWE-79 High WordPress Plugin stripShow SQL Injection (2.5.2) CVE-2014-5184 CWE-89 CWE-89 High WordPress Plugin Strong Testimonials Cross-Site Scripting (2.40.0) CVE-2020-8549 CWE-79 CWE-79 High WordPress Plugin Strong Testimonials Multiple Cross-Site Scripting Vulnerabilities (2.31.4) CWE-79 CWE-79 High WordPress Plugin Structured Content (JSON-LD) #wpsc Cross-Site Scripting (1.5) CVE-2022-4715 CWE-79 CWE-79 High WordPress Plugin STT2 Extension Add Terms Unspecified Vulnerability (1.0.2) High WordPress Plugin Student Result or Employee Database Security Bypass (1.6.3) CVE-2017-14766 CWE-287 CWE-287 High WordPress Plugin Style It Cross-Site Scripting (1.0) CVE-2014-4555 CWE-79 CWE-79 High WordPress Plugin Style Kits-Advanced Theme Styles for Elementor Cross-Site Request Forgery (1.8.0) CWE-352 CWE-352 High WordPress Plugin Stylish Cost Calculator Cross-Site Scripting (7.0.3) CVE-2021-24822 CWE-79 CWE-79 High WordPress Plugin Stylish Price List Security Bypass (6.8.14) CVE-2021-24757 CWE-863 CWE-863 High WordPress Plugin Stylish Price List Security Bypass (6.9.0) CVE-2021-24770 CWE-863 CWE-863 High WordPress Plugin Subscribe2 Cross-Site Scripting (10.15) CWE-79 CWE-79 High WordPress Plugin Subscribe2 Multiple Cross-Site Scripting Vulnerabilities (8.1) CWE-79 CWE-79 High WordPress Plugin Subscribe2 Unspecified Vulnerability (10.20.5) High WordPress Plugin Subscribe Form Remote Command Execution (1.1) CWE-94 CWE-94 High WordPress Plugin Subscriber by BestWebSoft Cross-Site Scripting (1.3.4) CVE-2017-2171 CVE-2017-2171 CVE-2017-18502 CWE-79 CWE-79 High WordPress Plugin Subscribe Sidebar by Blubrry Cross-Site Scripting (1.3.1) CVE-2020-25033 CWE-79 CWE-79 High WordPress Plugin Subscribe to Comments Local File Inclusion (2.1.2) CWE-22 CWE-22 High WordPress Plugin Subscribe to Comments Multiple Cross-Site Scripting Vulnerabilities (2.0.4) CWE-79 CWE-79 High WordPress Plugin Subscribe To Comments Reloaded Cross-Site Scripting (150611) CWE-79 CWE-79 High WordPress Plugin Subscribe To Comments Reloaded Multiple Vulnerabilities (140204) CVE-2014-2274 CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin Subscribe to Comments Unsubscribe Challenge Information Disclosure (2.0.2) CWE-200 CWE-200 High WordPress Plugin Subscriptions & Memberships for PayPal Cross-Site Scripting (1.1.2) CWE-79 CWE-79 High WordPress Plugin Subscriptions & Memberships for PayPal Unspecified Vulnerability (1.1.5) High WordPress Plugin Sucuri Security-Auditing, Malware Scanner and Security Hardening Cross-Site Scripting (1.7.15) CWE-79 CWE-79 High WordPress Plugin Sunshine Photo Cart Cross-Site Request Forgery (2.8.28) CWE-352 CWE-352 High WordPress Plugin Supafolio Multiple Unspecified Vulnerabilities (2.1.0) High WordPress Plugin Super CAPTCHA 'admin.php' SQL Injection (2.2.4) CWE-89 CWE-89 High WordPress Plugin Super Forms-Drag & Drop Form Builder Arbitrary File Upload (4.9.700) CWE-434 CWE-434 High WordPress Plugin Super Interactive Maps for WordPress Arbitrary File Upload (1.9) CWE-434 CWE-434 High WordPress Plugin Super Interactive Maps for WordPress SQL Injection (2.1) CWE-89 CWE-89 High WordPress Plugin Super Logos Showcase for WordPress Arbitrary File Upload (2.2) CWE-434 CWE-434 High WordPress Plugin Super Refer A Friend Information Disclosure (1.0) CWE-200 CWE-200 High WordPress Plugin Super Simple Custom CSS Cross-Site Scripting (1.2) CWE-79 CWE-79 High WordPress Plugin Super Store Finder for WordPress (Google Maps Store Locator) Arbitrary File Upload (6.1) CWE-434 CWE-434 High WordPress Plugin Super Store Finder for WordPress (Google Maps Store Locator) SQL Injection (6.3) CWE-89 CWE-89 High WordPress Plugin SupportCandy Arbitrary File Upload (2.0.0) CVE-2019-11223 CWE-434 CWE-434 High 1...136137138139...169 137 / 169
