Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13196 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.14)
-
CWE-502
High
WordPress 5.5.x Directory Traversal (5.5 - 5.5.14)
-
CWE-22
High
WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.13)
-
CWE-502
High
WordPress 5.6.x Directory Traversal (5.6 - 5.6.13)
-
CWE-22
High
WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.12)
-
CWE-502
High
WordPress 5.7.x Directory Traversal (5.7 - 5.7.11)
-
CWE-22
High
WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.10)
-
CWE-502
High
WordPress 5.8.x Directory Traversal (5.8 - 5.8.9)
-
CWE-22
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.8)
-
CWE-502
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.8)
-
CWE-502
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.9)
-
CWE-79
High
WordPress 6.0.x Cross-Site Scripting (6.0 - 6.0.7)
CVE-2024-4439
CWE-79
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.6)
-
CWE-502
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.8)
-
CWE-79
High
WordPress 6.1.x Cross-Site Scripting (6.1 - 6.1.5)
CVE-2024-4439
CWE-79
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.4)
-
CWE-502
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.6)
-
CWE-79
High
WordPress 6.2.x Cross-Site Scripting (6.2 - 6.2.4)
CVE-2024-4439
CWE-79
High
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.3)
-
CWE-502
High
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.5)
-
CWE-79
High
WordPress 6.3.x Cross-Site Scripting (6.3 - 6.3.3)
CVE-2024-4439
CWE-79
High
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.2)
-
CWE-502
High
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.4)
-
CWE-79
High
WordPress 6.4.x Cross-Site Scripting (6.4 - 6.4.3)
CVE-2024-4439
CWE-79
High
WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.4)
-
CWE-79
High
WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.2)
-
CWE-502
High
WordPress 6.5 Cross-Site Scripting (6.5)
CVE-2024-4439
CWE-79
High
WordPress 6.5.x Multiple Vulnerabilities (6.5 - 6.5.4)
-
CWE-79
High
WordPress Plugin WP-Stats 'author' Parameter SQL Injection (2.0)
CVE-2006-0238
CWE-89
High
WordPress Plugin Database Backup for WordPress 'edit.php' Directory Traversal (1.7)
CVE-2006-4208
CWE-22
High
WordPress Plugin myGallery Remote File Include (1.4b4)
CVE-2007-2426
CWE-94
High
WordPress Plugin myFlash Remote File Include (1.10)
CVE-2007-2485
CWE-94
High
WordPress Plugin Ruben Boelinger wordTube 'wpPATH' Parameter Multiple Remote File Include Vulnerabilities (1.43)
CVE-2007-2482
CWE-94
High
WordPress Plugin Ruben Boelinger WP-Table 'wpPATH' Parameter Multiple Remote File Include Vulnerabilities (1.43)
CVE-2007-2484
CWE-94
High
WordPress Plugin Automattic Stats Referer Field HTML Injection (1.0)
-
CWE-79
High
WordPress Plugin WP-FeedStats de HTML Injection (2.3)
CVE-2007-4104
CWE-79
High
WordPress Plugin BackUpWordPress Remote File Inclusion (0.4.2b)
CVE-2007-5800
CWE-94
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (0.9.2)
-
CWE-79
High
WordPress Plugin PictPress 'resize.php' Multiple Local File Include Vulnerabilities (1.0)
CVE-2007-6369
CWE-22
High
WordPress Plugin AdServe 'id' Parameter SQL Injection (0.2)
CVE-2008-0507
CWE-89
High
WordPress Plugin Dean's Permalinks Migration Cross-Site Request Forgery (1.0)
CVE-2008-0508
CWE-352
High
WordPress Plugin fGallery SQL Injection (2.4.1)
CVE-2008-0491
CWE-89
High
WordPress Plugin Peter's Math Anti-Spam Audio CAPTCHA Security Bypass (0.1.6)
CVE-2008-7216
CWE-264
High
WordPress Plugin SpamBam Key Calculation Security Bypass (2.1)
-
CWE-264
High
WordPress Plugin WassUp Real Time Analytics 'spy.php' SQL Injection (1.4.3)
CVE-2008-0520
CWE-89
High
WordPress Plugin WP-Cal 'id' Parameter SQL Injection (0.3)
CVE-2008-0490
CWE-89
High
WordPress Plugin Wp-FileManager 'ajaxfilemanager.php' Arbitrary File Upload (1.2)
CVE-2008-0222
CWE-94
High
WordPress Plugin WP-Forum SQL Injection (1.7.4)
CVE-2008-0388
CWE-89
High
WordPress Plugin DMSGuestbook Multiple Remote Vulnerabilities (1.8.0)
CVE-2008-0618
CWE-89
High
WordPress Plugin Search Unleashed 'Log' Function HTML Injection (0.2.10)
-
CWE-79
High
WordPress Plugin Sniplets Multiple Input Validation Vulnerabilities (1.2.2)
CVE-2008-1061
CWE-95
High
WordPress Plugin Wordspew 'id' Parameter SQL Injection (1.16)
CVE-2008-0682
CWE-89
High
WordPress Plugin WP-Footnotes 'admin_panel.php' Multiple Remote Vulnerabilities (2.2)
CVE-2008-0691
CWE-79
High
WordPress Plugin WP People 'wp-people-popup.php' SQL Injection (2.0)
-
CWE-89
High
WordPress Plugin WP-Download 'dl_id' Parameter SQL Injection (1.2)
CVE-2008-1646
CWE-89
High
WordPress Plugin Spreadsheet (wpSS) 'ss_id' Parameter SQL Injection (0.61)
CVE-2008-1982
CWE-89
High
WordPress Plugin WP Photo Album 'photo' Parameter SQL Injection (1.0)
CVE-2008-0939
CWE-89
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'nggallery-manage-gallery' HTML Injection (0.96)
CVE-2008-7175
CWE-79
High
WordPress Plugin Downloads Manager 'upload.php' Arbitrary File Upload (0.2)
CVE-2008-3362
CWE-20
High
WordPress Plugin Instinct e-Commerce Arbitrary File Upload (3.4)
CVE-2008-6811
CWE-434
High
WordPress Plugin WP Comment Remix SQL Injection and HTML Injection Vulnerabilities (1.4.3)
-
CWE-89
High
WordPress Plugin Fuctweb CapCC 'plugins.php' SQL Injection (1.0)
-
CWE-89
High
WordPress Plugin Page Flip Image Gallery 'book_id' Parameter Remote File Disclosure (0.2.2)
CVE-2008-5752
CWE-22
High
WordPress Plugin WP-Forum 'forum_feed.php' SQL Injection (1.7.8)
-
CWE-89
High
WordPress Plugin fMoblog 'id' Parameter SQL Injection (2.1)
CVE-2009-0968
CWE-89
High
WordPress Plugin WP-Lytebox 'pg' Parameter Local File Inclusion (1.3)
CVE-2009-4672
CWE-22
High
WordPress Plugin DM Albums 'album.php' Remote File Inclusion (1.9.2)
CVE-2009-2396
CWE-94
High
WordPress Plugin DM Albums File Dislosure (1.9.2)
-
CWE-22
High
WordPress Plugin FireStats 'firestats-wordpress.php' Remote File Include (1.6.1)
CVE-2009-2143
CWE-94
High
WordPress Plugin Photoracer 'id' Parameter SQL Injection (1.0)
CVE-2009-2122
CWE-89
High
WordPress Plugin Related Sites 'guid' Parameter SQL Injection (2.1)
CVE-2009-2383
CWE-89
High
WordPress Plugin My Category Order 'parentID' Parameter SQL Injection (2.8)
CVE-2009-4748
CWE-89
High
WordPress Plugin WP-Syntax Remote PHP Code Execution (0.9.9)
CVE-2009-2852
CWE-20
High
WordPress Plugin DM Albums Multiple File Deletion Vulnerabilities (2.1)
-
CWE-22
High
WordPress Plugin FireStats Multiple Cross-Site Scripting and Authentication Bypass Vulnerabilities (1.0.2)
-
CWE-287
High