Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
Werkzeug WSGI Insufficient Entropy Vulnerability (CVE-2019-14806)
CVE-2019-14806
CWE-331
High
Werkzeug WSGI Out-of-bounds Write Vulnerability (CVE-2023-46136)
CVE-2023-46136
CWE-787
High
Werkzeug WSGI URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-28724)
CVE-2020-28724
CWE-601
Medium
Whoops error handler component detected
-
CWE-200
Low
Wildcard Detected in Domain Portion of Content Security Policy (CSP) Directive
-
CWE-942
Information
Wildcard Detected in Port Portion of Content Security Policy (CSP) Directive
-
CWE-942
Information
Wildcard Detected in Scheme Portion of Content Security Policy (CSP) Directive
-
CWE-942
Information
WildFly Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0793)
CVE-2016-0793
CWE-200
High
WildFly Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1047)
CVE-2018-1047
CWE-22
Medium
WildFly Application Server Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2016-4993)
CVE-2016-4993
CWE-113
Medium
WildFly Application Server Uncontrolled Resource Consumption Vulnerability (CVE-2016-9589)
CVE-2016-9589
CWE-400
High
Wing FTP Anonymous access
-
CWE-200
Low
Wing FTP Server RCE (CVE-2025-47812)
CVE-2025-47812
CWE-158
Critical
WooCommerce Payments Authentication Bypass and Privilege Escalation
CVE-2023-28121
CWE-287
High
WooFramework shortcode exploit
-
CWE-95
High
WordPress 'admin-ajax.php' SQL Injection Vulnerability (2.1.3)
CVE-2007-2821
CWE-89
High
WordPress 'blog.header.php' Multiple SQL Injection Vulnerabilities (0.6.2 - 0.71)
-
CWE-89
High
WordPress 'cat' Parameter SQL Injection Vulnerability (1.5 - 1.5.1.1)
CVE-2005-1810
CWE-89
High
WordPress 'comment_post_ID' Parameter SQL Injection Vulnerability (3.0.4)
-
CWE-89
High
WordPress 'edit.php' Cross-Site Scripting Vulnerability (1.5)
-
CWE-79
High
WordPress 'get_edit_post_link()' and 'get_edit_comment_link()' Multiple Eavesdropping Vulnerabilities (0.6.2 - 2.6)
CVE-2008-3747
CWE-264
High
WordPress 'index.php' Cross-Site Scripting Vulnerability (1.5)
-
CWE-79
High
WordPress 'paged' Parameter SQL Injection Vulnerability (2.0.2 - 2.0.5)
CVE-2006-3389
CWE-89
High
WordPress 'post.php' Cross-Site Scripting Vulnerability (1.5)
-
CWE-79
High
WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.5.1)
CVE-2008-3233
CWE-79
High
WordPress 'press-this.php' Remote Security Bypass Vulnerability (0.7 - 3.1.1)
CVE-2011-5270
CWE-264
High
WordPress 'swfupload.swf' Cross-Site Scripting Vulnerability (2.5 - 3.3.1)
CVE-2012-3414
CWE-79
High
WordPress 'templates.php' Cross-Site Scripting Vulnerability (0.6.2 - 2.1)
CVE-2007-1049
CWE-79
High
WordPress 'wp-admin/admin.php' Module Configuration Security Bypass Vulnerability (0.6.2 - 2.8)
CVE-2009-2334
CWE-287
High
WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability (0.6.2 - 2.3.2)
CVE-2008-5695
CWE-20
High
WordPress 'wp-db.php' Character Set SQL Injection Vulnerability (2.0 - 2.3.1)
CVE-2007-6318
CWE-89
High
WordPress 'wp-login.php' HTTP Response Splitting Vulnerability (1.2)
CVE-2004-1584
CWE-113
High
WordPress 'wp-register.php' Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.0.1)
CVE-2007-5106
CWE-79
High
WordPress 'wp-trackback.php' SQL Injection Vulnerability (1.5)
CVE-2005-1687
CWE-89
High
WordPress 'xmlrpc.php' Remote Security Bypass Vulnerability (3.0.1 - 3.0.2)
CVE-2010-5106
CWE-264
High
WordPress 0.7 Posts SQL Injection Vulnerability (0.7)
CVE-2003-1598
CWE-89
High
WordPress 1.5.1.2 Multiple Vulnerabilities (1.0 - 1.5.1.2)
CVE-2005-2110
CWE-702
High
WordPress 2.0.1 Denial of Service Vulnerability (0.6.2 - 2.0.1)
-
CWE-400
High
WordPress 2.0.2 Username Remote PHP Code Injection Vulnerability (0.6.2 - 2.0.2)
CVE-2006-2702
CWE-94
High
WordPress 2.0.3 Multiple Unspecified Security Vulnerabilities (2.0 - 2.0.3)
CVE-2006-4028
CWE-264
High
WordPress 2.0.4 Multiple Security Vulnerabilities (2.0.4)
CVE-2006-6017
CWE-400
High
WordPress 2.0.5 Charset Decoding SQL Injection Vulnerability (0.6.2 - 2.0.5)
CVE-2007-0107
CWE-89
High
WordPress 2.0.5 Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5)
CVE-2006-6808
CWE-79
High
WordPress 2.0.5 Invalid CSRF Token Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5)
CVE-2007-0106
CWE-79
High
WordPress 2.0.6 'Zend_Hash_Del_Key_Or_Index' SQL Injection Vulnerability (0.6.2 - 2.0.6)
CVE-2007-0233
CWE-89
High
WordPress 2.0.9 Multiple Vulnerabilities (2.0 - 2.0.9)
CVE-2007-1897
CWE-264
High
WordPress 2.1.1 Command Execution Backdoor Vulnerability (2.1.1)
CVE-2007-1277
CWE-94
High
WordPress 2.1.1 Cross-Site Scripting Vulnerability (2.1.1)
CVE-2007-1244
CWE-79
High
WordPress 2.1.2 Multiple Vulnerabilities (2.1 - 2.1.2)
CVE-2007-1897
CWE-264
High
WordPress 2.2 Cross-Site Scripting Vulnerability (2.2)
CVE-2007-3238
CWE-79
High
WordPress 2.2 Multiple Vulnerabilities (2.2)
CVE-2007-3543
CWE-434
High
WordPress 2.2.1 Multiple Vulnerabilities (2.2.1)
CVE-2007-4154
CWE-601
High
WordPress 2.2.2 Multiple Vulnerabilities (2.2 - 2.2.2)
CVE-2008-2146
CWE-264
High
WordPress 2.3 Cross-Site Scripting Vulnerability (2.3)
CVE-2007-5710
CWE-79
High
WordPress 2.3.1 Unauthorized Post Access Vulnerability (2.3.1)
-
CWE-264
High
WordPress 2.3.2 Post Edit Unauthorized Access Vulnerability (0.7 - 2.3.2)
CVE-2008-0664
CWE-264
High
WordPress 2.3.3 Directory Traversal Vulnerability (0.6.2 - 2.3.3)
CVE-2008-4769
CWE-22
High
WordPress 2.5 Cookie Integrity Protection Unauthorized Access Vulnerability (0.6.2 - 2.5)
CVE-2008-1930
CWE-287
High
WordPress 2.5 Cross-Site Scripting Vulnerability (2.5)
CVE-2008-2068
CWE-79
High
WordPress 2.6.1 Lost Password SQL Column Truncation Unauthorized Access Vulnerability (0.71 - 2.6.1)
CVE-2008-4107
CWE-20
High
WordPress 2.6.2 Remote Code Execution Vulnerability (0.70 - 2.6.2)
CVE-2008-4796
CWE-94
High
WordPress 2.6.3 Cross-Site Scripting Vulnerability (0.6.2 - 2.6.3)
CVE-2008-5278
CWE-79
High
WordPress 2.8 Multiple Existing/Non-Existing Username Enumeration Weaknesses (0.6.2 - 2.8)
CVE-2009-2336
CWE-16
High
WordPress 2.8.1 Comment Author URI Cross-Site Scripting Vulnerability (0.6.2 - 2.8.1)
CVE-2009-2851
CWE-79
High
WordPress 2.8.2 Multiple Security Bypass Vulnerabilities (2.0 - 2.8.2)
CVE-2009-2854
CWE-264
High
WordPress 2.8.3 Admin Password Reset Security Bypass Vulnerability (0.6.2 - 2.8.3)
CVE-2009-2762
CWE-255
High
WordPress 2.8.4 Denial of Service Vulnerability (0.6.2 - 2.8.4)
CVE-2009-3622
-
High
WordPress 2.8.5 Multiple Vulnerabilities (2.8 - 2.8.5)
CVE-2009-3891
CWE-94
High
WordPress 2.9.1 Trashed Posts Security Bypass Vulnerability (2.9 - 2.9.1)
CVE-2010-0682
CWE-264
High
WordPress 3.0.1 Multiple Vulnerabilities (0.6.2 - 3.0.1)
CVE-2010-5296
CWE-264
High
WordPress 3.0.3 KSES Library Cross-Site Scripting Vulnerability (0.6.2 - 3.0.3)
CVE-2010-4536
CWE-79
High
WordPress 3.0.4 Multiple Vulnerabilities (0.6.2 - 3.0.4)
CVE-2011-0701
CWE-200
High
WordPress 3.1 Multiple Vulnerabilities (0.7 - 3.1)
CVE-2011-4957
CWE-400
High
WordPress 3.1.2 Multiple Vulnerabilities (3.0.1 - 3.1.2)
CVE-2011-3130
CWE-693
High
WordPress 3.1.3 Multiple SQL Injection Vulnerabilities (3.1 - 3.1.3)
-
CWE-89
High