Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Sensitive Information Disclosure Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity WordPress Plugin Donation Block For PayPal Unspecified Vulnerability (1.0.0) High WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Cross-Site Scripting (1.6.50) CVE-2021-24531 CWE-79 CWE-79 High WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Cross-Site Scripting (1.7.0.10) CVE-2022-47441 CWE-79 CWE-79 High WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Privilege Escalation (1.7.0.12) CVE-2023-4404 CWE-269 CWE-269 High WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Security Bypass (1.5.13) CVE-2018-21011 CWE-264 CWE-264 High WordPress Plugin Donations Privilege Escalation (1.3) CVE-2019-15772 CWE-264 CWE-264 High WordPress Plugin Donation Thermometer Cross-Site Scripting (2.1.2) CVE-2022-3128 CWE-79 CWE-79 High WordPress Plugin Donation with Goals and Paypal IPN by NonprofitCMS.org 'exporttocsv.php' SQL Injection (1.0) CWE-89 CWE-89 High WordPress Plugin Doneren met Mollie Information Disclosure (2.8.4) CWE-200 CWE-200 High WordPress Plugin Donorbox-Free Recurring Donation Form Cross-Site Scripting (7.1.1) CWE-79 CWE-79 High WordPress Plugin DOP Slider Arbitrary File Upload (1.0) CWE-434 CWE-434 High WordPress Plugin DosCero.Menu Cross-Site Scripting (1.0) CWE-79 CWE-79 High WordPress Plugin Double Opt-In for Download Multiple Cross-Site Scripting Vulnerabilities (2.1.5) CWE-79 CWE-79 High WordPress Plugin Double Opt-In for Download SQL Injection (2.0.8) CVE-2015-7517 CWE-89 CWE-89 High WordPress Plugin Double Opt-In for Download SQL Injection (2.0.9) CWE-89 CWE-89 High WordPress Plugin Download from files Arbitrary File Upload (1.48) CWE-434 CWE-434 High WordPress Plugin Download Manager Arbitrary File Deletion (3.2.50) CVE-2022-2431 CWE-73 CWE-73 High WordPress Plugin Download Manager Cross-Site Scripting (3.2.42) CVE-2022-1985 CWE-79 CWE-79 High WordPress Plugin Download Manager Cross-Site Scripting (3.2.46) CVE-2022-2101 CWE-79 CWE-79 High WordPress Plugin Download Manager Cross-Site Scripting (3.2.52) CWE-79 CWE-79 High WordPress Plugin Download Manager Directory Traversal (3.2.54) CVE-2022-2926 CWE-22 CWE-22 High WordPress Plugin Download Manager Multiple Cross-Site Scripting Vulnerabilities (3.2.48) CWE-79 CWE-79 High WordPress Plugin Download Manager PHAR Deserialization (3.2.49) CVE-2022-2436 CWE-502 CWE-502 High WordPress Plugin Download Monitor 'dlsearch' Parameter Cross-Site Scripting (3.3.5.8) CVE-2012-4768 CWE-79 CWE-79 High WordPress Plugin Download Monitor Cross-Site Scripting (1.7.0) CWE-79 CWE-79 High WordPress Plugin Download Monitor Cross-Site Scripting (3.3.6.1) CVE-2013-3262 CVE-2013-5098 CWE-79 CWE-79 High WordPress Plugin Download Monitor Information Disclosure (1.6.3) CWE-538 CWE-538 High WordPress Plugin Download Monitor SQL Injection (4.4.4) CVE-2021-24786 CWE-89 CWE-89 High WordPress Plugin Download Monitor Unspecified Vulnerability (1.9.6) High WordPress Plugin Download Monitor Unspecified Vulnerability (4.4.6) High WordPress Plugin Download Plugin Arbitrary Directory Download (1.0.1) CWE-538 CWE-538 High WordPress Plugin Download Plugins and Themes from Dashboard Cross-Site Scripting (1.5.0) CVE-2019-17239 CWE-79 CWE-79 High WordPress Plugin Download Plugin Security Bypass (1.6.0) CVE-2021-24703 CWE-264 CWE-264 High WordPress Plugin Download Plugin Unspecified Vulnerability (1.6.1) High WordPress Plugin Download Shortcode Arbitrary File Disclosure (0.1) CWE-22 CWE-22 High WordPress Plugin Download Shortcode Local File Inclusion (0.2.3) CVE-2014-5465 CWE-22 CWE-22 High WordPress Plugin Downloads Manager 'upload.php' Arbitrary File Upload (0.2) CVE-2008-3362 CWE-20 CWE-20 High WordPress Plugin Downloads Manager Arbitrary File Upload (1.0) CWE-434 CWE-434 High WordPress Plugin Download Theme Arbitrary Directory Download (1.0.2) CWE-538 CWE-538 High WordPress Plugin Download Zip Attachments Arbitrary File Download (1.0.0) CVE-2015-4704 CWE-22 CWE-22 High WordPress Plugin DP Maintenance Mode Lite Cross-Site Scripting (1.3.2) CWE-79 CWE-79 High WordPress Plugin DP Thumbnail TimThumb Arbitrary File Upload (1.0) CVE-2011-4106 CWE-20 CWE-20 High WordPress Plugin Drag & Drop File Uploader 'dnd-upload.php' Arbitrary File Upload (0.1) CWE-434 CWE-434 High WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Arbitrary File Upload (1.3.3.2) CVE-2020-12800 CWE-434 CWE-434 High WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Arbitrary File Upload (1.3.5.4) CVE-2020-24389 CWE-434 CWE-434 High WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Cross-Site Scripting (1.3.6.2) CVE-2022-0595 CWE-79 CWE-79 High WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Security Bypass (1.3.6.4) CVE-2022-3282 CWE-284 CWE-284 High WordPress Plugin Dropbox Folder Share Local File Inclusion (1.9.7) CVE-2023-4488 CWE-22 CWE-22 High WordPress Plugin Dropbox Folder Share Server-Side Request Forgery (1.9.7) CVE-2023-3025 CWE-918 CWE-918 High WordPress Plugin Dropdown and scrollable Text Cross-Site Scripting (2.0) CVE-2021-38353 CWE-79 CWE-79 High WordPress Plugin Dropdown Menu Widget Cross-Site Request Forgery (1.9.1) CVE-2013-2704 CWE-352 CWE-352 High WordPress Plugin Drop Shadow Boxes Security Bypass (1.7.1) CWE-264 CWE-264 High WordPress Plugin Dropshix Security Bypass (4.0.13) CWE-264 CWE-264 High WordPress Plugin Drug Search Cross-Site Scripting (1.0.0) CWE-79 CWE-79 High WordPress Plugin DS.DownloadList PHP Object Injection (1.2) CWE-915 CWE-915 High WordPress Plugin DSGVO All in one for WP Cross-Site Scripting (3.9) CVE-2021-24294 CWE-79 CWE-79 High WordPress Plugin DSGVO All in one for WP Cross-Site Scripting (4.1) CWE-79 CWE-79 High WordPress Plugin dsIDXpress IDX Cross-Site Scripting (2.1.0) CVE-2014-4521 CWE-79 CWE-79 High WordPress Plugin dsIDXpress IDX Multiple Unspecified Vulnerabilities (2.1.32) High WordPress Plugin dsSearchAgent:WordPress Edition Cross-Site Scripting (1.0-beta10) CVE-2014-4522 CWE-79 CWE-79 High WordPress Plugin DSubscribers SQL Injection (1.2) CWE-89 CWE-89 High WordPress Plugin Dtracker Multiple Vulnerabilities (1.5) CVE-2017-1002004 CVE-2017-1002005 CVE-2017-1002006 CVE-2017-1002007 CWE-79 CWE-89 CWE-79 CWE-89 High WordPress Plugin DukaPress Directory Traversal (2.5.2) CVE-2014-8799 CWE-22 CWE-22 High WordPress Plugin DukaPress Multiple Cross-Site Scripting Vulnerabilities (2.5.9) CWE-79 CWE-79 High WordPress Plugin DukaPress PHP Object Injection (3.1.20) CWE-915 CWE-915 High WordPress Plugin DukaPress SQL Injection (2.5.9) CVE-2015-1000011 CWE-89 CWE-89 High WordPress Plugin DukaPress TimThumb Arbitrary File Upload (2.3.2) CVE-2011-4106 CWE-20 CWE-20 High WordPress Plugin Duo Two-Factor Authentication Security Bypass (1.8.1) CWE-592 CWE-592 High WordPress Plugin Duplicate Page and Post Spam Injection (2.1.1) CWE-610 CWE-610 High WordPress Plugin Duplicate Page and Post SQL Injection (2.5.6) CWE-89 CWE-89 High WordPress Plugin Duplicate Page Cross-Site Scripting (4.4.2) CVE-2021-24681 CWE-79 CWE-79 High WordPress Plugin Duplicate Page Multiple Vulnerabilities (2.3) CWE-79 CWE-89 CWE-200 CWE-352 CWE-79 CWE-89 CWE-200 CWE-352 High WordPress Plugin Duplicate Page SQL Injection (3.3) CWE-89 CWE-89 High WordPress Plugin Duplicate Page Unspecified Vulnerability (3.5) High WordPress Plugin Duplicate Post Cross-Site Scripting (2.6) CWE-79 CWE-79 High 1...86878889...169 87 / 169
