Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Uncanny Toolkit for LearnDash Cross-Site Request Forgery (3.6.4.1)
CVE-2023-23714
CWE-352
High
WordPress Plugin Unconfirmed Cross-Site Scripting (1.2.3)
CVE-2014-100018
CWE-79
High
WordPress Plugin Under Construction Open Redirect (3.20)
-
CWE-601
High
WordPress Plugin Under Construction Unspecified Vulnerability (3.25)
-
-
High
WordPress Plugin Under Construction Unspecified Vulnerability (3.85)
-
-
High
WordPress Plugin Under Construction, Coming Soon & Maintenance Mode Multiple Vulnerabilities (1.1.1)
-
CWE-918
High
WordPress Plugin Under Construction/Maintenance Mode from Acurax Multiple Unspecified Vulnerabilities (2.5.2)
-
-
High
WordPress Plugin underConstruction Cross-Site Request Forgery (1.08)
CVE-2013-2699
CWE-352
High
WordPress Plugin underConstruction Cross-Site Scripting (1.18)
CVE-2021-39320
CWE-79
High
WordPress Plugin UnGallery 'search' Parameter Remote Arbitrary Command Execution (2.1.5)
-
CWE-95
High
WordPress Plugin UnGallery Local File Disclosure (1.5.8)
-
CWE-22
High
WordPress Plugin Unite Gallery Lite Multiple Vulnerabilities (1.4.6)
-
CWE-352
High
WordPress Plugin Universal Analytics Cross-Site Scripting (1.3.0)
-
CWE-79
High
WordPress Plugin Universal Post Manager Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.9)
-
CWE-89
High
WordPress Plugin Universal Star Rating Unspecified Vulnerability (1.10.3)
-
-
High
WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Cross-Site Scripting (1.5.107)
CVE-2024-3190
CWE-79
High
WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Remote Code Execution (1.5.89)
CVE-2023-6743
CWE-94
High
WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) SQL Injection (1.5.107)
CVE-2024-4779
CWE-89
High
WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) SQL Injection (1.5.109)
CVE-2024-5329
CWE-89
High
WordPress Plugin Unlimited Pop-Ups Multiple Cross-Site Scripting Vulnerabilities (1.4.3)
-
CWE-79
High
WordPress Plugin Unlimited PopUps SQL Injection (4.5.3)
CVE-2021-24631
CWE-89
High
WordPress Plugin Unyson Information Disclosure (2.7.18)
-
CWE-200
High
WordPress Plugin Updater by BestWebSoft Cross-Site Scripting (1.34)
CVE-2017-18565
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Request Forgery (1.22.24)
-
CWE-352
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Request Forgery (1.23.3)
CVE-2023-32960
CWE-352
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.13.4)
CVE-2017-18593
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.16.65)
CVE-2021-25022
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.16.68)
CVE-2021-25089
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.22.8)
CVE-2022-0864
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.9.63)
CVE-2015-9360
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Multiple Vulnerabilities (1.16.58)
CVE-2021-24423
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Privilege Escalation (1.23.2)
-
CWE-269
High
WordPress Plugin UpdraftPlus WordPress Backup Security Bypass (1.22.1)
CVE-2022-0633
CWE-264
High
WordPress Plugin UpdraftPlus WordPress Backup Security Bypass (1.9.50)
-
CWE-264
High
WordPress Plugin UpiCRM-Free WordPress CRM and Lead Management Information Disclosure (2.1.8.5)
-
CWE-538
High
WordPress Plugin Upload File Type Settings Cross-Site Scripting (1.1)
CVE-2023-25781
CWE-79
High
WordPress Plugin Uploader 'num' Parameter Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin Uploader 'uploadify.php' Arbitrary File Upload (1.0.4)
-
CWE-434
High
WordPress Plugin Uploader Cross-Site Scripting and Arbitrary File Upload Vulnerabilities (1.0.4)
CVE-2013-2288
CWE-434
High
WordPress Plugin Uploadify Integration Multiple Cross-Site Scripting Vulnerabilities (0.9.6)
-
CWE-79
High
WordPress Plugin Uploadify Remote File Upload (1.0)
-
CWE-20
High
WordPress Plugin UPM Polls 'PID' Parameter SQL Injection (1.0.4)
-
CWE-89
High
WordPress Plugin UPM Polls 'qid' Parameter SQL Injection (1.0.3)
-
CWE-89
High
WordPress Plugin URL Cloak & Encrypt Cross-Site Scripting (2.0)
CVE-2014-4563
CWE-79
High
WordPress Plugin Use Any Font Unspecified Vulnerability (4.3.6)
-
-
High
WordPress Plugin User Access Manager Cross-Site Scripting (1.2.14)
-
CWE-79
High
WordPress Plugin User Access Manager Cross-Site Scripting (1.2.6.7)
-
CWE-79
High
WordPress Plugin User Access Manager Unspecified Vulnerability (1.2.6.9)
-
-
High
WordPress Plugin User Activation Email Cross-Site Scripting (1.3.0)
CVE-2021-38325
CWE-79
High
WordPress Plugin User Activity Log Multiple Cross-Site Scripting Vulnerabilities (1.4.6)
-
CWE-79
High
WordPress Plugin User Activity Log Multiple Vulnerabilities (1.2.4)
-
CWE-352
High
WordPress Plugin User Activity Security Bypass (1.0.1)
CVE-2022-4550
CWE-290
High
WordPress Plugin User Avatar TimThumb Arbitrary File Upload (1.3.7)
CVE-2011-4106
CWE-20
High
WordPress Plugin User Avatar Unspecified Vulnerability (1.4.6)
-
-
High
WordPress Plugin User Control SQL Injection (2.1.0)
-
CWE-89
High
WordPress Plugin User Domain Whitelist Multiple Vulnerabilities (1.4)
-
CWE-352
High
WordPress Plugin user files Arbitrary File Upload (2.4.2)
-
CWE-434
High
WordPress Plugin User Login History Multiple Cross-Site Scripting Vulnerabilities (1.5.2)
CVE-2017-15867
CWE-79
High
WordPress Plugin User Login Log Cross-Site Scripting (2.2.2)
-
CWE-79
High
WordPress Plugin User Meta 'uploader.php' Arbitrary File Upload (1.1.1)
-
CWE-434
High
WordPress Plugin User Meta Manager Information Disclosure (3.4.7)
-
CWE-200
High
WordPress Plugin User Meta Manager Multiple Vulnerabilities (3.4.6)
-
CWE-264
High
WordPress Plugin User Photo 'user-photo.php' Arbitrary File Upload (0.9.4)
CVE-2013-1916
CWE-20
High
WordPress Plugin User Photo Cross-Site Scripting (0.9.5.1)
CVE-2012-2920
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor 'key' Parameter Security Bypass (1.1.24)
-
CWE-264
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Request Forgery (3.6.4)
CVE-2021-36915
CWE-352
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (2.0.2)
CVE-2014-8492
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (2.2.4)
-
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (2.4.1)
-
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (3.4.7)
CVE-2021-24448
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (3.6.1)
CVE-2022-0653
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (3.6.7)
CVE-2022-0884
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Information Disclosure (3.9.0)
CVE-2023-0814
CWE-200
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Multiple Cross-Site Scripting Vulnerabilities (1.1.65)
-
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Multiple Unspecified Vulnerabilities (2.5.7)
-
-
High