Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13071 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress 4.2.x Directory Traversal (4.2 - 4.2.37)
-
CWE-22
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.36)
-
CWE-502
High
WordPress 4.3.x Directory Traversal (4.3 - 4.3.33)
-
CWE-22
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.32)
-
CWE-502
High
WordPress 4.4.x Directory Traversal (4.4 - 4.4.32)
-
CWE-22
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.31)
-
CWE-502
High
WordPress 4.5.x Directory Traversal (4.5 - 4.5.31)
-
CWE-22
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.30)
-
CWE-502
High
WordPress 4.6.x Directory Traversal (4.6 - 4.6.28)
-
CWE-22
High
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.27)
-
CWE-502
High
WordPress 4.7.x Directory Traversal (4.7 - 4.7.28)
-
CWE-22
High
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.27)
-
CWE-502
High
WordPress 4.8.x Directory Traversal (4.8 - 4.8.24)
-
CWE-22
High
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.23)
-
CWE-502
High
WordPress 4.9.x Directory Traversal (4.9 - 4.9.25)
-
CWE-22
High
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.24)
-
CWE-502
High
WordPress 5.0.x Directory Traversal (5.0 - 5.0.21)
-
CWE-22
High
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.20)
-
CWE-502
High
WordPress 5.1.x Directory Traversal (5.1 - 5.1.18)
-
CWE-22
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.17)
-
CWE-502
High
WordPress 5.2.x Directory Traversal (5.2 - 5.2.20)
-
CWE-22
High
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.19)
-
CWE-502
High
WordPress 5.3.x Directory Traversal (5.3 - 5.3.17)
-
CWE-22
High
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.16)
-
CWE-502
High
WordPress 5.4.x Directory Traversal (5.4 - 5.4.15)
-
CWE-22
High
WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.14)
-
CWE-502
High
WordPress 5.5.x Directory Traversal (5.5 - 5.5.14)
-
CWE-22
High
WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.13)
-
CWE-502
High
WordPress 5.6.x Directory Traversal (5.6 - 5.6.13)
-
CWE-22
High
WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.12)
-
CWE-502
High
WordPress 5.7.x Directory Traversal (5.7 - 5.7.11)
-
CWE-22
High
WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.10)
-
CWE-502
High
WordPress 5.8.x Directory Traversal (5.8 - 5.8.9)
-
CWE-22
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.8)
-
CWE-502
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.8)
-
CWE-502
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.9)
-
CWE-79
High
WordPress 6.0.x Cross-Site Scripting (6.0 - 6.0.7)
CVE-2024-4439
CWE-79
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.6)
-
CWE-502
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.8)
-
CWE-79
High
WordPress 6.1.x Cross-Site Scripting (6.1 - 6.1.5)
CVE-2024-4439
CWE-79
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.4)
-
CWE-502
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.6)
-
CWE-79
High
WordPress 6.2.x Cross-Site Scripting (6.2 - 6.2.4)
CVE-2024-4439
CWE-79
High
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.3)
-
CWE-502
High
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.5)
-
CWE-79
High
WordPress 6.3.x Cross-Site Scripting (6.3 - 6.3.3)
CVE-2024-4439
CWE-79
High
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.2)
-
CWE-502
High
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.4)
-
CWE-79
High
WordPress 6.4.x Cross-Site Scripting (6.4 - 6.4.3)
CVE-2024-4439
CWE-79
High
WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.4)
-
CWE-79
High
WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.2)
-
CWE-502
High
WordPress 6.5 Cross-Site Scripting (6.5)
CVE-2024-4439
CWE-79
High
WordPress 6.5.x Multiple Vulnerabilities (6.5 - 6.5.4)
-
CWE-79
High
WordPress Plugin WP-Stats 'author' Parameter SQL Injection (2.0)
CVE-2006-0238
CWE-89
High
WordPress Plugin Database Backup for WordPress 'edit.php' Directory Traversal (1.7)
CVE-2006-4208
CWE-22
High
WordPress Plugin myGallery Remote File Include (1.4b4)
CVE-2007-2426
CWE-94
High
WordPress Plugin myFlash Remote File Include (1.10)
CVE-2007-2485
CWE-94
High
WordPress Plugin Ruben Boelinger wordTube 'wpPATH' Parameter Multiple Remote File Include Vulnerabilities (1.43)
CVE-2007-2482
CWE-94
High
WordPress Plugin Ruben Boelinger WP-Table 'wpPATH' Parameter Multiple Remote File Include Vulnerabilities (1.43)
CVE-2007-2484
CWE-94
High
WordPress Plugin Automattic Stats Referer Field HTML Injection (1.0)
-
CWE-79
High
WordPress Plugin WP-FeedStats de HTML Injection (2.3)
CVE-2007-4104
CWE-79
High
WordPress Plugin BackUpWordPress Remote File Inclusion (0.4.2b)
CVE-2007-5800
CWE-94
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (0.9.2)
-
CWE-79
High
WordPress Plugin PictPress 'resize.php' Multiple Local File Include Vulnerabilities (1.0)
CVE-2007-6369
CWE-22
High
WordPress Plugin AdServe 'id' Parameter SQL Injection (0.2)
CVE-2008-0507
CWE-89
High
WordPress Plugin Dean's Permalinks Migration Cross-Site Request Forgery (1.0)
CVE-2008-0508
CWE-352
High
WordPress Plugin fGallery SQL Injection (2.4.1)
CVE-2008-0491
CWE-89
High
WordPress Plugin Peter's Math Anti-Spam Audio CAPTCHA Security Bypass (0.1.6)
CVE-2008-7216
CWE-264
High
WordPress Plugin SpamBam Key Calculation Security Bypass (2.1)
-
CWE-264
High
WordPress Plugin WassUp Real Time Analytics 'spy.php' SQL Injection (1.4.3)
CVE-2008-0520
CWE-89
High
WordPress Plugin WP-Cal 'id' Parameter SQL Injection (0.3)
CVE-2008-0490
CWE-89
High
WordPress Plugin Wp-FileManager 'ajaxfilemanager.php' Arbitrary File Upload (1.2)
CVE-2008-0222
CWE-94
High
WordPress Plugin WP-Forum SQL Injection (1.7.4)
CVE-2008-0388
CWE-89
High
WordPress Plugin DMSGuestbook Multiple Remote Vulnerabilities (1.8.0)
CVE-2008-0618
CWE-89
High
WordPress Plugin Search Unleashed 'Log' Function HTML Injection (0.2.10)
-
CWE-79
High