Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Authentication Bypass

This page lists 844 vulnerabilities in this category.

Critical: 30 High: 809 Medium: 5
Vulnerability Name
CVE
CWE
Severity
Drupal Core 8.x.x Security Bypass (8.0.0 - 8.7.14)
CVE-2020-13665
CWE-264
High
Drupal Core 8.x.x Security Bypass (8.0.0 - 8.6.18)
-
CWE-264
High
Drupal Core 9.0.0 Security Bypass (9.0.0)
CVE-2020-13665
CWE-264
High
Drupal Core 9.0.x Security Bypass (9.0.0 - 9.0.5)
CVE-2020-13667
CWE-264
High
Drupal Core 7.x Security Bypass (7.0 - 7.90)
CVE-2022-25275
CWE-264
High
Drupal Core 7.x Security Bypass (7.0 - 7.87)
CVE-2022-25271
CWE-20
High
Drupal Core 8.9.x Multiple Security Bypass Vulnerabilities (8.9.0 - 8.9.18)
CVE-2020-13677
CWE-284
High
Drupal Core 8.x.x Multiple Security Bypass Vulnerabilities (8.0.0 - 8.8.12)
CVE-2020-13677
CWE-284
High
Drupal Core 9.0.x Multiple Security Bypass Vulnerabilities (9.0.0 - 9.0.14)
CVE-2020-13677
CWE-284
High
Drupal Core 9.1.x Multiple Security Bypass Vulnerabilities (9.1.0 - 9.1.12)
CVE-2020-13677
CWE-284
High
Drupal Core 8.3.0 Security Bypass (8.3.0)
CVE-2017-6919
CWE-264
High
Drupal Core 8.x Security Bypass (8.0.0 - 8.1.6)
CVE-2016-5385
CWE-284
High
JWT Signature Bypass via unvalidated jku parameter
-
CWE-287
High
Drupal Core 4.7.x Security Bypass (4.7.0 - 4.7.7)
CVE-2007-5597
CWE-702
High
JWT Signature Bypass via unvalidated jwk parameter
-
CWE-287
High
JWT Signature Bypass via kid Path Traversal
-
CWE-287
High
JWT Signature Bypass via kid SQL injection
-
CWE-287
High
JWT Signature Bypass via unvalidated x5c parameter
-
CWE-287
High
JWT Signature Bypass via unvalidated x5u parameter
-
CWE-287
High
Next.js Middleware Authorization Bypass
CVE-2025-29927
CWE-285
High
Weak Session ID in cookie Detected
-
CWE-287
High
Drupal Core 4.5.x Security Bypass (4.5.0 - 4.5.7)
-
CWE-264
High
Drupal Core 4.6.x Security Bypass (4.6.0 - 4.6.3)
CVE-2005-3974
CWE-264
High
Drupal Core 4.6.x Security Bypass (4.6.0 - 4.6.5)
-
CWE-264
High
Drupal Core 5.x Multiple Security Bypass Vulnerabilities (5.0 - 5.22)
CVE-2010-3093
CWE-264
High
Drupal Core 8.x Security Bypass (8.0.0 - 8.1.2)
CVE-2016-6212
CWE-264
High
Drupal Core 5.x Multiple Security Bypass Vulnerabilities (5.0 - 5.10)
CVE-2008-4793
CWE-264
High
Drupal Core 5.x Security Bypass (5.0 - 5.2)
CVE-2007-5597
CWE-702
High
Drupal Core 6.x Multiple Security Bypass Vulnerabilities (6.0 - 6.4)
CVE-2008-4792
CWE-264
High
Drupal Core 6.x Security Bypass (6.0 - 6.1)
-
CWE-264
High
Drupal Core 6.x Security Bypass (6.0 - 6.35)
CVE-2015-3234
CWE-287
High
Drupal Core 6.x Security Bypass (6.0 - 6.29)
CVE-2014-1475
CWE-287
High
Drupal Core 7.x Multiple Security Bypass Vulnerabilities (7.0 - 7.25)
CVE-2014-1476
CWE-287
High
Drupal Core 7.x Security Bypass (7.0 - 7.4)
CVE-2011-2726
CWE-264
High
Drupal Core 7.x Security Bypass (7.0 - 7.2)
CVE-2011-2687
CWE-264
High
Drupal Core 7.x Security Bypass (7.0 - 7.43)
CVE-2016-6211
CWE-264
High
WordPress Plugin YITH WooCommerce Ajax Search Security Bypass (1.6.9)
CVE-2019-16251
CWE-264
High
WordPress Plugin InfiniteWP Client Security Bypass (1.3.7)
-
CWE-264
High
WordPress Plugin Duo Two-Factor Authentication Security Bypass (1.8.1)
-
CWE-592
High
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Multiple Security Bypass Vulnerabilities (8.0)
-
CWE-264
High
WordPress Plugin Livemesh Addons for Elementor Security Bypass (2.5.2)
-
CWE-264
High
WordPress Plugin Livemesh SiteOrigin Widgets Security Bypass (2.5.1)
-
CWE-264
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Security Bypass (3.1.6)
-
CWE-264
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Security Bypass (1.7.29)
-
CWE-264
High
WordPress Plugin Post Snippets Security Bypass (3.0.5)
-
CWE-264
High
WordPress Plugin Social Share Icons & Social Share Buttons Security Bypass (3.0.2)
-
CWE-264
High
WordPress Plugin Stop User Enumeration Security Bypass (1.3.18)
-
CWE-264
High
WordPress Plugin Widgets for SiteOrigin Security Bypass (1.4.2)
-
CWE-264
High
WordPress Plugin Woocommerce User Email Verification Security Bypass (3.3.0)
-
CWE-264
High
WordPress Plugin WP fail2ban Security Bypass (4.0.2)
-
CWE-264
High
WordPress Plugin FooBox Image Lightbox Security Bypass (2.6.3)
-
CWE-264
High
WordPress Plugin WP Mobile Menu-The Mobile-Friendly Responsive Menu Security Bypass (2.7.2)
-
CWE-264
High
WordPress Plugin Login No Captcha reCAPTCHA Security Bypass (1.4.1)
-
CWE-264
High
WordPress Plugin Visual CSS Style Editor Security Bypass (7.1.9)
CVE-2019-11886
CWE-264
High
WordPress Plugin WP Human Resource Management Security Bypass (2.2.5)
CVE-2019-9574
CWE-264
High
WordPress Plugin Battle Suit for Divi Security Bypass (1.10.1)
-
CWE-264
High
WordPress Plugin Convert Plus Security Bypass (3.4.2)
-
CWE-264
High
WordPress Plugin Mobile blocks Security Bypass (1.0)
-
CWE-264
High
WordPress Plugin Mobile Booster Security Bypass (1.0)
-
CWE-264
High
WordPress Plugin Passster Age Gate Security Bypass (4.0.6)
-
CWE-264
High
WordPress Plugin Pctags-Pinterest conversion tags for Pinterest Ads (advertising) + Event tracking + Site verification + WooCommerce Security Bypass (1.0.1)
-
CWE-264
High
WordPress Plugin Image Photo Gallery Final Tiles Grid Security Bypass (3.3.52)
-
CWE-264
High
WordPress Plugin Easy Watermark Security Bypass (0.7.0)
-
CWE-264
High
WordPress Plugin WordPress Robots.txt optimization (+ XML Sitemap)-Website traffic, SEO & ranking Booster Security Bypass (1.2.5.1)
-
CWE-264
High
WordPress Plugin Essential Content Types Security Bypass (1.4)
-
CWE-264
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Security Bypass (2.0.13)
CVE-2014-8802
CWE-264
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (3.5.13)
-
CWE-264
High
WordPress Plugin AMP for WP-Accelerated Mobile Pages Security Bypass (0.9.97.19)
-
CWE-264
High
WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page Security Bypass (1.87)
-
CWE-264
High
WordPress Plugin Social Sharing-Kiwi Security Bypass (2.0.10)
-
CWE-264
High
WordPress Plugin WooCommerce Product Feed for Google, Facebook, eBay and Many More Security Bypass (2.2.26)
-
CWE-264
High
WordPress Plugin ARMember-Content Restriction & Membership Security Bypass (1.4)
-
CWE-264
High
WordPress Plugin Smart Marketing SMS and Newsletters Forms Security Bypass (2.6.1)
-
CWE-264
High
WordPress Plugin Dokan-Best WooCommerce Multivendor Marketplace Solution-Build Your Own Amazon, eBay, Etsy Security Bypass (2.9.4)
-
CWE-264
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Security Bypass (3.0.1)
-
CWE-264
High