Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Download Manager Arbitrary File Deletion (3.2.50)
CVE-2022-2431
CWE-73
High
WordPress Plugin Download Manager Cross-Site Scripting (3.2.42)
CVE-2022-1985
CWE-79
High
WordPress Plugin Download Manager Cross-Site Scripting (3.2.46)
CVE-2022-2101
CWE-79
High
WordPress Plugin Download Manager Cross-Site Scripting (3.2.52)
-
CWE-79
High
WordPress Plugin Download Manager Directory Traversal (3.2.54)
CVE-2022-2926
CWE-22
High
WordPress Plugin Download Manager Multiple Cross-Site Scripting Vulnerabilities (3.2.48)
-
CWE-79
High
WordPress Plugin Download Manager PHAR Deserialization (3.2.49)
CVE-2022-2436
CWE-502
High
WordPress Plugin Download Monitor 'dlsearch' Parameter Cross-Site Scripting (3.3.5.8)
CVE-2012-4768
CWE-79
High
WordPress Plugin Download Monitor Cross-Site Scripting (1.7.0)
-
CWE-79
High
WordPress Plugin Download Monitor Cross-Site Scripting (3.3.6.1)
CVE-2013-5098
CWE-79
High
WordPress Plugin Download Monitor Information Disclosure (1.6.3)
-
CWE-538
High
WordPress Plugin Download Monitor SQL Injection (4.4.4)
CVE-2021-24786
CWE-89
High
WordPress Plugin Download Monitor Unspecified Vulnerability (1.9.6)
-
-
High
WordPress Plugin Download Monitor Unspecified Vulnerability (4.4.6)
-
-
High
WordPress Plugin Download Plugin Arbitrary Directory Download (1.0.1)
-
CWE-538
High
WordPress Plugin Download Plugin Security Bypass (1.6.0)
CVE-2021-24703
CWE-264
High
WordPress Plugin Download Plugin Unspecified Vulnerability (1.6.1)
-
-
High
WordPress Plugin Download Plugins and Themes from Dashboard Cross-Site Scripting (1.5.0)
CVE-2019-17239
CWE-79
High
WordPress Plugin Download Shortcode Arbitrary File Disclosure (0.1)
-
CWE-22
High
WordPress Plugin Download Shortcode Local File Inclusion (0.2.3)
CVE-2014-5465
CWE-22
High
WordPress Plugin Download Theme Arbitrary Directory Download (1.0.2)
-
CWE-538
High
WordPress Plugin Download Zip Attachments Arbitrary File Download (1.0.0)
CVE-2015-4704
CWE-22
High
WordPress Plugin Downloads Manager 'upload.php' Arbitrary File Upload (0.2)
CVE-2008-3362
CWE-20
High
WordPress Plugin Downloads Manager Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin DP Maintenance Mode Lite Cross-Site Scripting (1.3.2)
-
CWE-79
High
WordPress Plugin DP Thumbnail TimThumb Arbitrary File Upload (1.0)
CVE-2011-4106
CWE-20
High
WordPress Plugin Drag & Drop File Uploader 'dnd-upload.php' Arbitrary File Upload (0.1)
-
CWE-434
High
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Arbitrary File Upload (1.3.3.2)
CVE-2020-12800
CWE-434
High
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Arbitrary File Upload (1.3.5.4)
CVE-2020-24389
CWE-434
High
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Cross-Site Scripting (1.3.6.2)
CVE-2022-0595
CWE-79
High
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Security Bypass (1.3.6.4)
CVE-2022-3282
CWE-284
High
WordPress Plugin Drop Shadow Boxes Security Bypass (1.7.1)
-
CWE-264
High
WordPress Plugin Dropbox Folder Share Local File Inclusion (1.9.7)
CVE-2023-4488
CWE-22
High
WordPress Plugin Dropbox Folder Share Server-Side Request Forgery (1.9.7)
CVE-2023-3025
CWE-918
High
WordPress Plugin Dropdown and scrollable Text Cross-Site Scripting (2.0)
CVE-2021-38353
CWE-79
High
WordPress Plugin Dropdown Menu Widget Cross-Site Request Forgery (1.9.1)
CVE-2013-2704
CWE-352
High
WordPress Plugin Dropshix Security Bypass (4.0.13)
-
CWE-264
High
WordPress Plugin Drug Search Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin DS.DownloadList PHP Object Injection (1.2)
-
CWE-915
High
WordPress Plugin DSGVO All in one for WP Cross-Site Scripting (3.9)
CVE-2021-24294
CWE-79
High
WordPress Plugin DSGVO All in one for WP Cross-Site Scripting (4.1)
-
CWE-79
High
WordPress Plugin dsIDXpress IDX Cross-Site Scripting (2.1.0)
CVE-2014-4521
CWE-79
High
WordPress Plugin dsIDXpress IDX Multiple Unspecified Vulnerabilities (2.1.32)
-
-
High
WordPress Plugin dsSearchAgent:WordPress Edition Cross-Site Scripting (1.0-beta10)
CVE-2014-4522
CWE-79
High
WordPress Plugin DSubscribers SQL Injection (1.2)
-
CWE-89
High
WordPress Plugin Dtracker Multiple Vulnerabilities (1.5)
CVE-2017-1002007
CWE-89
High
WordPress Plugin DukaPress Directory Traversal (2.5.2)
CVE-2014-8799
CWE-22
High
WordPress Plugin DukaPress Multiple Cross-Site Scripting Vulnerabilities (2.5.9)
-
CWE-79
High
WordPress Plugin DukaPress PHP Object Injection (3.1.20)
-
CWE-915
High
WordPress Plugin DukaPress SQL Injection (2.5.9)
CVE-2015-1000011
CWE-89
High
WordPress Plugin DukaPress TimThumb Arbitrary File Upload (2.3.2)
CVE-2011-4106
CWE-20
High
WordPress Plugin Duo Two-Factor Authentication Security Bypass (1.8.1)
-
CWE-592
High
WordPress Plugin Duplicate Page and Post Spam Injection (2.1.1)
-
CWE-610
High
WordPress Plugin Duplicate Page and Post SQL Injection (2.5.6)
-
CWE-89
High
WordPress Plugin Duplicate Page Cross-Site Scripting (4.4.2)
CVE-2021-24681
CWE-79
High
WordPress Plugin Duplicate Page Multiple Vulnerabilities (2.3)
-
CWE-352
High
WordPress Plugin Duplicate Page SQL Injection (3.3)
-
CWE-89
High
WordPress Plugin Duplicate Page Unspecified Vulnerability (3.5)
-
-
High
WordPress Plugin Duplicate Post Cross-Site Scripting (2.6)
-
CWE-79
High
WordPress Plugin Duplicate Post Multiple Vulnerabilities (2.5)
-
CWE-89
High
WordPress Plugin Duplicate Post SQL Injection (1.1.9)
CVE-2021-43408
CWE-89
High
WordPress Plugin Duplicate Theme Unspecified Vulnerability (0.1.4)
-
-
High
WordPress Plugin Duplicator-WordPress Migration Arbitrary File Disclosure (0.3.0)
-
CWE-22
High
WordPress Plugin Duplicator-WordPress Migration Arbitrary File Download (1.3.26)
CVE-2020-11738
CWE-538
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Request Forgery (1.1.2)
-
CWE-352
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (0.4.4)
CVE-2013-4625
CWE-79
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (0.5.26)
-
CWE-79
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (1.2.28)
CVE-2017-16815
CWE-79
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (1.2.32)
CVE-2018-7543
CWE-79
High
WordPress Plugin Duplicator-WordPress Migration Remote Code Execution (1.2.40)
-
CWE-94
High
WordPress Plugin Duplicator-WordPress Migration Security Bypass (0.5.8)
CVE-2014-9262
CWE-264
High
WordPress Plugin Duplicator-WordPress Migration SQL Injection (0.5.14)
-
CWE-89
High
WordPress Plugin Duplicator-WordPress Migration Unspecified Vulnerability (1.1.34)
-
-
High
WordPress Plugin DVS Custom Notification Multiple Cross-Site Request Forgery Vulnerabilities (1.0.1)
CVE-2012-4921
CWE-352
High
WordPress Plugin DW Mega Menu Cross-Site Request Forgery (1.0.1)
-
CWE-352
High