Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Sensitive Information Disclosure Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Xss - Known Vulnerabilities Vulnerability Name CVE CWE CWE Severity WordPress Plugin WordPress Social Stream Security Bypass (1.5.15) CWE-264 CWE-264 High WordPress Plugin WordPress Survey & Poll-Quiz, Survey and Poll PHP Object Injection (1.5.5) CWE-915 CWE-915 High WordPress Plugin WordPress Survey & Poll-Quiz, Survey and Poll SQL Injection (1.1.91) CVE-2015-2090 CWE-89 CWE-89 High WordPress Plugin WordPress Survey & Poll-Quiz, Survey and Poll Unspecified Vulnerability (1.5.8.5) High WordPress Plugin WordPress Ultra Simple Paypal Shopping Cart Cross-Site Request Forgery (4.4) CVE-2019-5992 CWE-352 CWE-352 High WordPress Plugin WordPress Ultra Simple Paypal Shopping Cart Multiple Cross-Site Scripting Vulnerabilities (4.3.9.0) CWE-79 CWE-79 High WordPress Plugin Wordpress Uninstall Cross-Site Request Forgery (1.2.1) CVE-2015-9332 CWE-352 CWE-352 High WordPress Plugin WordPress Users 'uid' Parameter SQL Injection (1.3) CVE-2011-4669 CWE-89 CWE-89 High WordPress Plugin wordpress vertical image slider Multiple Vulnerabilities (1.0) CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin WORDPRESS VIDEO GALLERY Multiple Cross-Site Request Forgery Vulnerabilities (2.8) CWE-352 CWE-352 High WordPress Plugin WORDPRESS VIDEO GALLERY Multiple Vulnerabilities (2.3.1) CVE-2014-9097 CVE-2014-9098 CWE-79 CWE-89 CWE-79 CWE-89 High WordPress Plugin WORDPRESS VIDEO GALLERY Open Email Relay (2.8) CWE-264 CWE-264 High WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.0) CVE-2013-3478 CWE-89 CWE-89 High WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.7) CVE-2015-2065 CWE-89 CWE-89 High WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.8) CWE-89 CWE-89 High WordPress Plugin WordPress Video Player Cross-Site Scripting (1.5.1) CVE-2014-8584 CWE-79 CWE-79 High WordPress Plugin WordPress Video Player Multiple SQL Injection Vulnerabilities (1.5.16) CWE-89 CWE-89 High WordPress Plugin WordPress Video Player Multiple Vulnerabilities (1.5.4) CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin WordPress WP-Advanced-Search Cross-Site Request Forgery (3.3.8) CVE-2022-47447 CWE-352 CWE-352 High WordPress Plugin WordPress WP-Advanced-Search Remote Code Execution (3.3.3) CWE-94 CWE-94 High WordPress Plugin WordPress WP-Advanced-Search SQL Injection (3.3.5) CWE-89 CWE-89 High WordPress Plugin WordPress WP-Advanced-Search SQL Injection (3.3.6) CVE-2020-12104 CWE-89 CWE-89 High WordPress Plugin Wordspew 'id' Parameter SQL Injection (1.16) CVE-2008-0682 CWE-89 CWE-89 High WordPress Plugin Work The Flow File Upload Arbitrary File Upload (2.3.1) CWE-434 CWE-434 High WordPress Plugin Work The Flow File Upload Arbitrary File Upload (2.5.2) CWE-434 CWE-434 High WordPress Plugin World of Warcraft-Armory Table Cross-Site Scripting (0.2.5) CWE-79 CWE-79 High WordPress Plugin World Travel Information Cross-Site Scripting (1.0.0) CWE-79 CWE-79 High WordPress Plugin Wow Forms-create any form with custom style SQL Injection (2.1) CWE-89 CWE-89 High WordPress Plugin Wow Forms-create any form with custom style SQL Injection (3.1.3) CVE-2021-24628 CWE-89 CWE-89 High WordPress Plugin Wow Moodboard Lite Open Redirect (1.1.1.1) CVE-2015-4070 CWE-601 CWE-601 High WordPress Plugin WoWPth Cross-Site Scripting (2.0) CWE-79 CWE-79 High WordPress Plugin Wow Viral Signups SQL Injection (2.1) CWE-89 CWE-89 High WordPress Plugin wp-autosuggest SQL Injection (0.24) CWE-89 CWE-89 High WordPress Plugin WP-AutoYoutube 'index.php' Script SQL Injection (0.1) CWE-89 CWE-89 High WordPress Plugin WP-Backgrounds Lite Cross-Site Request Forgery (2.3) CWE-352 CWE-352 High WordPress Plugin WP-Ban Cross-Site Scripting (1.69) CVE-2022-4260 CWE-79 CWE-79 High WordPress Plugin WP-Ban Security Bypass (1.63) CVE-2014-6230 CWE-284 CWE-284 High WordPress Plugin WP-BlipBot Cross-Site Scripting (3.0.9) CVE-2014-4580 CWE-79 CWE-79 High WordPress Plugin WP-Board SQL Injection (1.1) CVE-2021-24404 CWE-89 CWE-89 High WordPress Plugin wp-buddha-free-adwords Security Bypass (1.0.0) CWE-264 CWE-264 High WordPress Plugin WP-Business Directory (wp-ttisbdir) Multiple Cross-Site Scripting Vulnerabilities (1.0.2) CVE-2014-4599 CWE-79 CWE-79 High WordPress Plugin WP-Cal 'id' Parameter SQL Injection (0.3) CVE-2008-0490 CWE-89 CWE-89 High WordPress Plugin wp-championship SQL Injection (5.8) CVE-2015-5308 CWE-89 CWE-89 High WordPress Plugin WP-Client Lite::Client Portals, File Sharing, Messaging & Invoicing Local File Inclusion (1.1.1) CVE-2014-2383 CWE-22 CWE-22 High WordPress Plugin WP-Contact Multiple Cross-Site Scripting Vulnerabilities (1.0) CVE-2014-4583 CWE-79 CWE-79 High WordPress Plugin WP-CopyProtect [Protect your blog posts] Cross-Site Scripting (3.0.0) CWE-79 CWE-79 High WordPress Plugin WP-Cron Dashboard Cross-Site Scripting (1.1.5) CVE-2013-6991 CWE-79 CWE-79 High WordPress Plugin WP-Cumulus 'tagcloud.swf' Cross-Site Scripting (1.22) CVE-2009-4168 CWE-79 CWE-79 High WordPress Plugin WP-Curriculo Vitae Free Arbitrary File Upload (6.3) CVE-2021-24222 CWE-434 CWE-434 High WordPress Plugin Wp-D3 Cross-Site Request Forgery (2.4) CWE-352 CWE-352 High WordPress Plugin WP-DBManager 'wp-config.php' Arbitrary File Download (2.60) CWE-22 CWE-22 High WordPress Plugin WP-DBManager Arbitrary File Deletion (2.79.1) CWE-73 CWE-73 High WordPress Plugin WP-DBManager Multiple Vulnerabilities (2.71) CVE-2014-8334 CVE-2014-8335 CVE-2014-8336 CWE-95 CWE-200 CWE-95 CWE-200 High WordPress Plugin WP-Download 'dl_id' Parameter SQL Injection (1.2) CVE-2008-1646 CWE-89 CWE-89 High WordPress Plugin WP-DownloadManager Cross-Site Request Forgery (1.60) CVE-2013-2697 CWE-352 CWE-352 High WordPress Plugin WP-DownloadManager Cross-Site Scripting (1.67) CWE-79 CWE-79 High WordPress Plugin wp-easybooking Cross-Site Scripting (1.0.3) CVE-2014-4584 CWE-79 CWE-79 High WordPress Plugin WP-FaceThumb 'pagination_wp_facethumb' Parameter Cross-Site Scripting (0.1) CVE-2012-2371 CWE-79 CWE-79 High WordPress Plugin WP-FaceThumb Cross-Site Scripting (1.0) CVE-2014-4585 CWE-79 CWE-79 High WordPress Plugin WP-FB-AutoConnect Multiple Cross-Site Request Forgery Vulnerabilities (4.0.5) CWE-352 CWE-352 High WordPress Plugin WP-FeedStats de HTML Injection (2.3) CVE-2007-4104 CWE-79 CWE-79 High WordPress Plugin WP-Filebase Download Manager 'base' Parameter SQL Injection (0.2.9) CWE-89 CWE-89 High WordPress Plugin WP-Filebase Download Manager Cross-Site Scripting (3.1.02) CWE-79 CWE-79 High WordPress Plugin WP-Filebase Download Manager Cross-Site Scripting (3.4.4) CWE-79 CWE-79 High WordPress Plugin WP-Filebase Download Manager Multiple Unspecified Vulnerabilities (0.2.9.24) High WordPress Plugin WP-Filebase Download Manager Remote Code Execution (0.3.0.03) CWE-94 CWE-94 High WordPress Plugin Wp-FileManager 'ajaxfilemanager.php' Arbitrary File Upload (1.2) CVE-2008-0222 CWE-94 CWE-94 High WordPress Plugin wp-FileManager Arbitrary File Disclosure (1.3.0) CWE-22 CWE-22 High WordPress Plugin wp-football Multiple Cross-Site Scripting Vulnerabilities (1.1) CVE-2014-4586 CWE-79 CWE-79 High WordPress Plugin WP-Footnotes 'admin_panel.php' Multiple Remote Vulnerabilities (2.2) CVE-2008-0691 CWE-79 CWE-79 High WordPress Plugin WP-Forum 'forum_feed.php' SQL Injection (1.7.8) CWE-89 CWE-89 High WordPress Plugin WP-Forum 'sendmail.php' SQL Injection (1.7.8) CWE-89 CWE-89 High WordPress Plugin WP-Forum Multiple SQL Injection Vulnerabilities (1.7.8) CWE-89 CWE-89 High WordPress Plugin WP-Forum Multiple SQL Injection Vulnerabilities (2.3) CVE-2009-3703 CWE-89 CWE-89 High WordPress Plugin WP-Forum SQL Injection (1.7.4) CVE-2008-0388 CWE-89 CWE-89 High 1...152153154155...169 153 / 169
