Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity WordPress Plugin Dbox 3D Slider Lite SQL Injection (1.2.2) CVE-2018-5374 CWE-89 CWE-89 High WordPress Plugin DB Toolkit 'uploadify.php' Arbitrary File Upload (0.1.10) CWE-434 CWE-434 High WordPress Plugin Dean's FCKEditor with pwwang's code Arbitrary File Upload (1.0.0) CWE-20 CWE-20 High WordPress Plugin Dean's Permalinks Migration Cross-Site Request Forgery (1.0) CVE-2008-0508 CWE-352 CWE-352 High WordPress Plugin Debug Bar Multiple Unspecified Vulnerabilities (0.8.4) High WordPress Plugin Debug Bar Unspecified Vulnerability (0.8) High WordPress Plugin Debug Log Manager Cross-Site Request Forgery (2.2.1) CVE-2023-5772 CWE-352 CWE-352 High WordPress Plugin Debug Log Manager Information Disclosure (2.2.2) CVE-2023-6383 CWE-200 CWE-200 High WordPress Plugin Debug Log Manager Security Bypass (2.2.1) CVE-2023-6136 CWE-862 CWE-862 High WordPress Plugin Deeper Comments Security Bypass (2.1.1) CWE-862 CWE-862 High WordPress Plugin Defa Online Image Protector Cross-Site Scripting (3.3) CVE-2016-1000129 CWE-79 CWE-79 High WordPress Plugin Default Facebook Thumbnails Multiple Vulnerabilities (0.4) CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin Default Thumbnail Plus Arbitrary File Upload (1.0.2.3) CVE-2024-6161 CWE-434 CWE-434 High WordPress Plugin Defender Security-Malware Scanner, Login Security & Firewall Cross-Site Request Forgery (2.4.6) CWE-352 CWE-352 High WordPress Plugin Delete All Comments Arbitrary File Upload (2.0) CWE-434 CWE-434 High WordPress Plugin Delete All Comments Cross-Site Request Forgery (1.0) CWE-352 CWE-352 High WordPress Plugin Delete All Comments Easily Cross-Site Request Forgery (1.3) CWE-352 CWE-352 High WordPress Plugin Delete Comments By Status Multiple Cross-Site Scripting Vulnerabilities (1.5.2) CWE-79 CWE-79 High WordPress Plugin Delete Duplicate Posts Security Bypass (4.1.9.4) CWE-264 CWE-264 High WordPress Plugin Delightful Downloads Directory Traversal (1.6.6) CVE-2017-1000170 CWE-22 CWE-22 High WordPress Plugin DELUCKS SEO Cross-Site Scripting (2.1.7) CWE-79 CWE-79 High WordPress Plugin DELUCKS SEO Unspecified Vulnerability (1.2.2) High WordPress Plugin Democracy Poll Multiple Vulnerabilities (5.3.6) CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin DeMomentSomTres Subscribe Cross-Site Scripting (201909190900) CWE-79 CWE-79 High WordPress Plugin demon image annotation Cross-Site Request Forgery (4.7) CVE-2022-2864 CWE-352 CWE-352 High WordPress Plugin Deny All Firewall Cross-Site Request Forgery (1.1.6) CVE-2019-14681 CWE-352 CWE-352 High WordPress Plugin Design Approval System Cross-Site Scripting (3.6) CVE-2013-5711 CWE-79 CWE-79 High WordPress Plugin DethemeKit For Elementor Multiple Cross-Site Scripting Vulnerabilities (1.5.5.4) CVE-2021-24270 CWE-79 CWE-79 High WordPress Plugin Developer Formatter Cross-Site Request Forgery (2012.0.1.39) CWE-352 CWE-352 High WordPress Plugin Developer Tools Arbitrary File Upload (1.1.4) CWE-434 CWE-434 High WordPress Plugin Dexs PM System Cross-Site Scripting (1.0.1) CWE-79 CWE-79 High WordPress Plugin DFD Reddcoin Tips Cross-Site Scripting (1.1.1) CWE-79 CWE-79 High WordPress Plugin Dharma booking Local/Remote File Inclusion (2.38.3) CWE-98 CWE-98 High WordPress Plugin Dialog Contact Form Cross-Site Scripting (1.2.0) CWE-79 CWE-79 High WordPress Plugin Diary & Availability Calendar SQL Injection (1.0.3) CVE-2021-24555 CWE-89 CWE-89 High WordPress Plugin Digg Digg Cross-Site Request Forgery (5.3.4) CVE-2013-3258 CWE-352 CWE-352 High WordPress Plugin Digital Climate Strike WP Malicious Redirects (1.0.0) CWE-601 CWE-601 High WordPress Plugin Digital Publications by Supsystic Multiple Vulnerabilities (1.6.9) CWE-22 CWE-79 CWE-22 CWE-79 High WordPress Plugin Digital River Global Commerce Supply Chain Attack [Polyfill.io] (2.0.2) CWE-1372 CWE-1372 High WordPress Plugin Direct Download for Woocommerce Arbitrary File Download (1.15) CWE-538 CWE-538 High WordPress Plugin Directories Pro Cross-Site Scripting (1.3.45) CVE-2020-29303 CVE-2020-29304 CWE-79 CWE-79 High WordPress Plugin DirectoryPress-Business Directory And Classified Ad Listing SQL Injection (3.6.10) CVE-2024-38755 CWE-89 CWE-89 High WordPress Plugin Disable Comments Cross-Site Request Forgery (1.0.3) CVE-2014-2550 CWE-352 CWE-352 High WordPress Plugin Disable Comments Cross-Site Scripting (1.3) CWE-79 CWE-79 High WordPress Plugin Disable Feeds Unspecified Vulnerability (1.4) High WordPress Plugin Disable Image Right Click Cross-Site Scripting (1.0) CVE-2021-24435 CWE-79 CWE-79 High WordPress Plugin Disc Golf Manager PHP Object Injection (1.0.0) CWE-915 CWE-915 High WordPress Plugin Disclosure Policy 'abspath' Parameter Remote File Include (1.0) CWE-94 CWE-94 High WordPress Plugin Discount Rules for WooCommerce Multiple Vulnerabilities (2.0.2) CWE-79 CWE-89 CWE-264 CWE-79 CWE-89 CWE-264 High WordPress Plugin Discount Rules for WooCommerce Security Bypass (2.2.0) CWE-264 CWE-264 High WordPress Plugin Discounts Manager for Products Cross-Site Scripting (3.4.4) CWE-79 CWE-79 High WordPress Plugin Display Posts Shortcode Unspecified Vulnerability (1.9) High WordPress Plugin Display Users SQL Injection (2.0.0) CVE-2021-24400 CWE-89 CWE-89 High WordPress Plugin Display Widgets Cross-Site Scripting (2.03) CWE-79 CWE-79 High WordPress Plugin Display Widgets Spam Links Injection (2.6.3.1) CWE-610 CWE-610 High WordPress Plugin Disqus Comment System Cross-Site Scripting (2.68) CWE-79 CWE-79 High WordPress Plugin Disqus Comment System Multiple Cross-Site Request Forgery Vulnerabilities (2.77) CVE-2014-5346 CWE-352 CWE-352 High WordPress Plugin Disqus Comment System Multiple Vulnerabilities (2.75) CVE-2014-5345 CVE-2014-5347 CWE-79 CWE-95 CWE-352 CWE-79 CWE-95 CWE-352 High WordPress Plugin Ditty WordPress-Responsive Slider, List, and Ticker Display Cross-Site Scripting (3.0.14) CVE-2022-0533 CWE-79 CWE-79 High WordPress Plugin Ditty WordPress-Responsive Slider, List, and Ticker Display Cross-Site Scripting (3.0.32) CVE-2023-23874 CWE-79 CWE-79 High WordPress Plugin Ditty WordPress-Responsive Slider, List, and Ticker Display Unspecified Vulnerability (1.5.1) High WordPress Plugin DiveBook Multiple Vulnerabilities (1.1.4) CVE-2020-14205 CVE-2020-14206 CVE-2020-14207 CWE-79 CWE-89 CWE-264 CWE-79 CWE-89 CWE-264 High WordPress Plugin Divi Builder Arbitrary File Upload (4.5.2) CVE-2020-35945 CWE-434 CWE-434 High WordPress Plugin Divi Builder Cross-Site Scripting (2.17.2) CWE-79 CWE-79 High WordPress Plugin Divi Builder PHP Code Injection (4.0.9) CWE-95 CWE-95 High WordPress Plugin Divi Builder Security Bypass (1.2.3) CWE-264 CWE-264 High WordPress Plugin DJ EmailPublish Cross-Site Scripting (1.7.2) CVE-2021-38329 CWE-79 CWE-79 High WordPress Plugin DM Albums 'album.php' Remote File Inclusion (1.9.2) CVE-2009-2396 CWE-94 CWE-94 High WordPress Plugin DM Albums File Dislosure (1.9.2) CWE-22 CWE-22 High WordPress Plugin DM Albums Multiple File Deletion Vulnerabilities (2.1) CWE-22 CWE-22 High WordPress Plugin DMCA WaterMarker Cross-Site Scripting (1.0) CVE-2014-4520 CWE-79 CWE-79 High WordPress Plugin DMSGuestbook File Manipulation (1.17.4) CWE-99 CWE-99 High WordPress Plugin DMSGuestbook Multiple Remote Vulnerabilities (1.8.0) CVE-2008-0615 CVE-2008-0616 CVE-2008-0617 CVE-2008-0618 CWE-22 CWE-79 CWE-89 CWE-22 CWE-79 CWE-89 High WordPress Plugin Docket Cache-Object Cache Accelerator Cross-Site Scripting (21.08.01) CWE-79 CWE-79 High WordPress Plugin Doctor Appointment Booking Multiple Vulnerabilities (1.0.0) CWE-79 CWE-89 CWE-79 CWE-89 High 1...94959697...179 95 / 179
