Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.130426185443

Medium Severity Vulnerabilities

Found 15376 vulnerabilities at Medium severity.

Reference
Title
Technology
CVE-2019-14947
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
WordPress Ultimate Member Plugin
CVE-2015-8354
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
WordPress Ultimate Member Plugin
CVE-2024-8520
WordPress Ultimate Member Plugin Cross-Site Request Forgery (CSRF) Vulnerability
WordPress Ultimate Member Plugin
CVE-2024-8519
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
WordPress Ultimate Member Plugin
CVE-2024-12276
WordPress Ultimate Member Plugin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
WordPress Ultimate Member Plugin
CVE-2025-0318
WordPress Ultimate Member Plugin Vulnerability
WordPress Ultimate Member Plugin
CVE-2024-2765
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
WordPress Ultimate Member Plugin
CVE-2024-10528
WordPress Ultimate Member Plugin Missing Authorization Vulnerability
WordPress Ultimate Member Plugin
CVE-2024-2123
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
WordPress Ultimate Member Plugin
CVE-2023-3042
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2018-19554
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2022-45783
Dot CMS Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Dot CMS
CVE-2022-37034
Dot CMS Uncontrolled Recursion Vulnerability
Dot CMS
CVE-2022-37431
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2022-37033
Dot CMS Server-Side Request Forgery (SSRF) Vulnerability
Dot CMS
CVE-2022-35740
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2021-35358
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2021-35360
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2021-35361
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2020-17542
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2020-35274
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2017-3188
Dot CMS Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Dot CMS
CVE-2019-12309
Dot CMS Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Dot CMS
CVE-2019-11846
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2017-5877
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2017-5876
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2017-5875
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2017-6003
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS
CVE-2018-17422
Dot CMS URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Dot CMS
CVE-2018-16980
Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Dot CMS