Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.3.2229

Authentication Bypass

This page lists 843 vulnerabilities in this category.

Critical: 30 High: 808 Medium: 5
Vulnerability Name
CVE
CWE
Severity
OpenMetadata Authentication Bypass (CVE-2024-28255)
CVE-2024-28255
CWE-287
Critical
Ivanti Sentry Authentication Bypass (CVE-2023-38035)
CVE-2023-38035
CWE-863
Critical
Cisco IOS XE Web UI Authentication Bypass (CVE-2023-20198)
CVE-2023-20198
CWE-287
Critical
SharePoint Authentication bypass (CVE-2023-29357)
CVE-2023-29357
CWE-287
Critical
TeamCity Authentication Bypass (CVE-2023-42793)
CVE-2023-42793
CWE-287
Critical
Jira Seraph Authentication Bypass (CVE-2022-0540)
CVE-2022-0540
CWE-288
Critical
CData Jetty Path Traversal (CVE-2024-31848/CVE-2024-31849/CVE-2024-31850/CVE-2024-31851)
CVE-2024-31851
CWE-22
Critical
Cacti Unauthenticated Command Injection (CVE-2022-46169)
CVE-2022-46169
CWE-77
Critical
CloudPanel file-manager Auth bypass (CVE-2023-35885)
CVE-2023-35885
CWE-565
Critical
CyberPanel RCE (CVE-2024-51567/CVE-2024-51568/CVE-2024-51378)
CVE-2024-51378
CWE-306
Critical
Flowise Authentication Bypass (CVE-2024-31621)
CVE-2024-31621
CWE-287
Critical
GoAnywhere MFT Authentication Bypass (CVE-2024-0204)
CVE-2024-0204
CWE-425
Critical
Wing FTP Server RCE (CVE-2025-47812)
CVE-2025-47812
CWE-158
Critical
SharePoint "ToolShell" RCE (CVE-2025-49704/CVE-2025-49706/CVE-2025-53770/CVE-2025-53771)
CVE-2025-53771
CWE-287
Critical
Ivanti vTM Auth bypass (CVE-2024-7593)
CVE-2024-7593
CWE-287
Critical
Adobe Commerce/Magento "SessionReaper" RCE (CVE-2025-54236)
CVE-2025-54236
CWE-20
Critical
Apache OFBiz Authentication Bypass (CVE-2023-51467)
CVE-2023-51467
CWE-287
Critical
Apache OFBiz RCE (CVE-2024-32113/CVE-2024-36104/CVE-2024-38856)
CVE-2024-38856
CWE-22
Critical
Apache OFBiz RCE (CVE-2024-45195)
CVE-2024-45195
CWE-425
Critical
PAN-OS Management Interface Authentication Bypass (CVE-2025-0108)
CVE-2025-0108
CWE-287
Critical
Palo Alto PAN-OS Management Interface Auth Bypass (CVE-2024-0012/CVE-2024-9474)
CVE-2024-9474
CWE-306
Critical
Telerik Report Server Authentication Bypass Vulnerability
CVE-2024-4358
CWE-287
Critical
ScreenConnect Auth bypass (CVE-2024-1709)
CVE-2024-1708
CWE-288
Critical
Oracle Identity Manager Authentication Bypass (CVE-2025-61757)
CVE-2025-61757
CWE-306
Critical
SolarWinds Web Help Desk Hardcoded Credential (CVE-2024-28987)
CVE-2024-28987
CWE-798
Critical
TeamCity Authentication Bypass (CVE-2024-27198)
CVE-2024-27198
CWE-288
Critical
Kentico Staging API Authentication Bypass
CVE-2025-2746
CWE-287
Critical
FortiWeb Authentication Bypass (CVE-2025-64446)
CVE-2025-58034
CWE-23
Critical
SmarterTools SmarterMail Admin Password Reset (CVE-2026-23760)
CVE-2026-23760
CWE-288
Critical
CrushFTP Authentication Bypass (CVE-2025-2825)
CVE-2025-2825
CWE-287
Critical
WordPress Plugin Thrive Leads Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin WooCommerce Security Bypass (4.6.1)
-
CWE-264
High
WordPress Plugin BuddyPress Multiple Security Bypass Vulnerabilities (7.2.0)
CVE-2021-21389
CWE-264
High
WordPress Plugin Ultimate GDPR & CCPA Compliance Toolkit for WordPress Security Bypass (2.4)
-
CWE-264
High
WordPress Plugin Limit Login Attempts Reloaded Security Bypass (2.17.3)
CVE-2020-35590
CWE-264
High
WordPress Plugin Elementor Website Builder Security Bypass (3.0.13)
CVE-2020-36171
CWE-264
High
WordPress Plugin Easy WP SMTP Security Bypass (1.4.2)
CVE-2020-35234
CWE-264
High
WordPress Plugin BuddyPress Security Bypass (6.3.0)
-
CWE-264
High
WordPress Plugin WP to Twitter Security Bypass (3.2.19)
-
CWE-264
High
WordPress Plugin WP Munich Blocks-Gutenberg Blocks for WordPress Security Bypass (0.7.2)
-
CWE-264
High
WordPress Plugin WooCommerce Product Feed Manager Security Bypass (2.2.3)
-
CWE-264
High
WordPress Plugin Controlled Admin Access Security Bypass (1.5.5)
-
CWE-264
High
WordPress Plugin WooCommerce BuddyPress Integration Security Bypass (3.2.5)
-
CWE-264
High
WordPress Plugin WooCommerce Blocks Security Bypass (3.7.0)
-
CWE-264
High
WordPress Plugin WooCommerce Anti-Fraud Security Bypass (3.2)
-
CWE-264
High
WordPress Plugin Ultimeter Security Bypass (1.9.2)
-
CWE-264
High
WordPress Plugin Starfish Review Generation & Marketing for WordPress Security Bypass (2.0.0)
-
CWE-264
High
WordPress Plugin Simple Giveaways-Grow your business, email lists and traffic with contests Security Bypass (2.17.3)
-
CWE-264
High
WordPress Plugin Remove WP Update Nags Security Bypass (1.3.0)
-
CWE-264
High
WordPress Plugin Premmerce Wishlist for WooCommerce Security Bypass (1.1.2)
-
CWE-264
High
WordPress Plugin Premmerce Wholesale Pricing for WooCommerce Security Bypass (1.1.3)
-
CWE-264
High
WordPress Plugin Controlled Admin Access Security Bypass (1.4.0)
CVE-2021-24215
CWE-284
High
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (3.1.9)
CVE-2021-24148
CWE-264
High
WordPress Plugin Thrive Optimize Security Bypass (1.4.13.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Comments Security Bypass (1.4.15.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Ovation Security Bypass (2.4.4)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Quiz Builder Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Themes Builder Security Bypass (2.2.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Ultimatum Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin BuddyPress Multiple Security Bypass Vulnerabilities (7.2.1)
-
CWE-264
High
WordPress Plugin Thrive Headline Optimizer Security Bypass (1.3.7.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Thrive Dashboard Security Bypass (2.3.9.2)
CVE-2021-24219
CWE-264
High
WordPress Plugin Conditional Marketing Mailer for WooCommerce Security Bypass (1.5.1)
-
CWE-264
High
WordPress Plugin Login as User or Customer Security Bypass (1.7)
-
CWE-264
High
WordPress Plugin The Plus Addons for Elementor Security Bypass (4.1.6)
CVE-2021-24175
CWE-264
High
WordPress Plugin SecuPress Free-WordPress Security Security Bypass (1.4.13)
-
CWE-264
High
WordPress Plugin SecuPress Pro Security Bypass (1.4.12)
-
CWE-264
High
WordPress Plugin Thrive Architect Security Bypass (2.6.7.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin User Rights Access Manager Security Bypass (1.0.3)
-
CWE-264
High
WordPress Plugin Thrive Apprentice Security Bypass (2.3.9.3)
CVE-2021-24219
CWE-264
High
WordPress Plugin Visitor Traffic Real Time Statistics Security Bypass (2.11)
-
CWE-264
High
WordPress Plugin WP Content Copy Protection & No Right Click Security Bypass (3.1.4)
-
CWE-264
High
WordPress Plugin WP Maintenance Mode & Site Under Construction Security Bypass (1.8.1)
-
CWE-264
High
WordPress Plugin iThemes Security (formerly Better WP Security) Security Bypass (7.9.0)
-
CWE-264
High
WordPress Plugin Captchinoo, Google recaptcha for admin login page Security Bypass (2.3)
-
CWE-264
High