Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Code Execution

This page lists 401 vulnerabilities in this category.

Critical: 62 High: 328 Medium: 10 Low: 1
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Secure File Manager Remote Code Execution (2.8.1)
CVE-2020-35235
CWE-94
High
WordPress Plugin WordPress PDF Light Viewer Command Injection (1.4.11)
CVE-2021-24684
CWE-94
High
WordPress Plugin Gutenberg Block Editor Toolkit-EditorsKit Remote Code Execution (1.31.5)
CVE-2021-24546
CWE-94
High
WordPress Plugin Include Me Remote Code Execution (1.2.1)
CVE-2021-24453
CWE-94
High
WordPress Plugin CiviCRM Remote Code Execution (5.24.2)
CVE-2020-36388
CWE-502
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Remote Code Execution (4.1.0.1)
CVE-2021-24307
CWE-94
High
WordPress Plugin WP Super Cache Remote Code Execution (1.7.1)
CVE-2021-24209
CWE-94
High
WordPress Plugin WP Hotel Booking Remote Code Execution (1.10.2)
CVE-2020-29047
CWE-502
High
WordPress Plugin Five Star Restaurant Menu-WordPress Ordering Remote Code Execution (2.2.0)
CVE-2020-29045
CWE-502
High
WordPress Plugin WordPress Mega Menu-QuadMenu Remote Code Execution (2.0.6)
-
CWE-94
High
WordPress Plugin WP E-Signature Remote Code Execution (1.5.6.5)
-
CWE-94
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Remote Code Execution (2.0.32)
-
CWE-94
High
WordPress Plugin Arigato Autoresponder and Newsletter Remote Code Execution (2.5.1.9)
CVE-2018-18461
CWE-94
High
WordPress Plugin Zingiri Web Shop 'ajax_save_name.php' Remote Code Execution (2.2.3)
-
CWE-95
High
WordPress Plugin WP-Filebase Download Manager Remote Code Execution (0.3.0.03)
-
CWE-94
High
WordPress Plugin WordPress Landing Pages Remote Code Execution (1.9.0)
CVE-2015-5227
CWE-94
High
WordPress Plugin Form Manager Remote Command Execution (1.7.2)
CVE-2015-7806
CWE-94
High
WordPress Plugin BJ Lazy Load Remote Code Execution (0.7.5)
-
CWE-94
High
WordPress Plugin Custom Content Type Manager Remote Code Execution (0.9.8.5)
CVE-2015-3173
CWE-94
High
WordPress Plugin eShop Code Injection (6.3.11)
CVE-2015-3421
CWE-94
High
WordPress Plugin Subscribe Form Remote Command Execution (1.1)
-
CWE-94
High
WordPress Plugin Gantry 4 Framework Remote Command Execution (4.1.3)
-
CWE-95
High
WordPress Plugin Ajax Search Lite Remote Command Execution (3.1)
-
CWE-95
High
WordPress Plugin WordPress Download Manager Remote Code Execution (2.7.4)
-
CWE-94
High
WordPress Plugin Flamingo Code Injection (1.1)
-
CWE-95
High
WordPress Plugin iThemes Exchange:Simple WP Ecommerce Remote Code Execution (1.14.0)
-
CWE-94
High
WordPress Plugin File Gallery Remote Code Execution (1.7.9)
CVE-2014-2558
CWE-94
High
WordPress Plugin EZPZ One Click Backup Remote Code Execution (12.03.10)
CVE-2014-3114
CWE-78
High
WordPress Plugin CM Download Manager Code Injection (2.0.3)
CVE-2014-8877
CWE-95
High
WordPress Plugin All-in-One WP Migration Remote Code Execution (2.0.2)
CVE-2014-8794
CWE-94
High
WordPress Plugin Advanced Access Manager Arbitrary Code Execution (2.8.2)
CVE-2014-6059
CWE-95
High
WordPress Plugin WP Super Cache PHP Code Injection (1.2)
CVE-2013-2011
CWE-95
High
WordPress Plugin open-flash-chart-core Remote Code Execution (0.4)
CVE-2009-4140
CWE-434
High
WordPress Plugin UnGallery 'search' Parameter Remote Arbitrary Command Execution (2.1.5)
-
CWE-95
High
WordPress Plugin Global Content Blocks PHP Code Execution and Information Disclosure Vulnerabilities (1.5.1)
-
CWE-200
High
WordPress Plugin Video Embed & Thumbnail Generator 'kg_callffmpeg.php' Multiple Remote Code Execution Vulnerabilities (1.1)
CVE-2012-1785
CWE-20
High
WordPress Plugin Cool Video Gallery Command Injection (1.9)
CVE-2015-7527
CWE-94
High
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Remote Code Execution (2.0.14)
-
CWE-94
High
WordPress Plugin Duplicator-WordPress Migration Remote Code Execution (1.2.40)
-
CWE-94
High
WordPress Plugin Statistics Remote Code Execution (1.8)
-
CWE-94
High
WordPress Plugin Plainview Activity Monitor Remote Command Execution (20161228)
CVE-2018-15877
CWE-94
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Remote Code Execution (2.8.5)
CVE-2019-15873
CWE-94
High
WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Remote Code Execution (5.0.0)
-
CWE-94
High
WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Remote Code Execution (2.05.01)
-
CWE-94
High
WordPress Plugin VaultPress Remote Code Execution (1.9.0)
-
CWE-94
High
WordPress Plugin Lightbox Jquery Possible Remote Code Execution (0.24)
-
CWE-94
High
WordPress Plugin Analytics Remote Code Execution (1.7)
-
CWE-94
High
WordPress Plugin WP-Live Chat by 3CX Remote Code Execution (7.0.01)
CVE-2016-10045
CWE-94
High
WordPress Plugin VaultPress Man-in-The-Middle (MiTM) Remote Code Execution (1.8.6)
-
CWE-94
High
WordPress Plugin Best Seo Remote Code Execution (1.5)
-
CWE-94
High
WordPress Plugin Newsletter Subscription Form Possible Remote Code Execution (1.1.2)
CVE-2016-10045
CWE-94
High
WordPress Plugin EWWW Image Optimizer Remote Code Execution (2.8.3)
-
CWE-94
High
WordPress Plugin Maintenance Mode Under Construction Page Landing Page Possible Remote Code Execution (1.0.9)
CVE-2016-10045
CWE-94
High
WordPress Plugin Coming Soon Possible Remote Code Execution (1.1.3)
CVE-2016-10045
CWE-94
High
WordPress Plugin Share Possible Remote Code Execution (1.0)
-
CWE-94
High
WordPress Plugin Google Map Remote Code Execution (1.0)
-
CWE-94
High
WordPress Plugin Fast Secure Contact Form Remote Code Execution (4.0.44)
CVE-2016-10045
CWE-94
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Remote Code Execution (2.1.59)
-
CWE-94
High
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads PHP Code Injection (1.3)
-
CWE-95
High
WordPress Plugin wSecure Lite Remote Code Execution (2.3)
CVE-2016-10960
CWE-94
High
WordPress Plugin WP Maintenance Mode Remote Code Execution (2.0.6)
CVE-2018-20156
CWE-94
High
WordPress Plugin Social Media Tab Remote Code Execution (1.0.9)
-
CWE-94
High
WordPress Plugin W3 Total Cache PHP Code Injection (0.9.2.8)
CVE-2013-2010
CWE-95
High
VMware Horizon Log4Shell RCE
CVE-2021-44228
CWE-78
High
Oracle E-Business Suite Unauthenticated Remote Code Execution
CVE-2022-21587
CWE-94
High
vBulletin PHP object injection vulnerability
-
CWE-915
High
OpenX arbitrary file upload
CVE-2009-4140
CWE-434
High
phpThumb() fltr[] parameter command injection vulnerability
CVE-2010-1598
CWE-20
High
TinyMCE ajax_create_folder remote code execution vulnerability
-
CWE-94
High
ColdFusion 8 FCKEditor file upload vulnerability
CVE-2009-2265
CWE-22
High
WordPress caching plugins PHP code execution
CVE-2013-2010
CWE-95
High
Ruby on Rails weak/known secret token
CVE-2013-0156
CWE-200
High
CodeIgniter weak encryption key
-
CWE-200
High
vBSEO 3.6.0 PHP code injection
CVE-2012-5223
CWE-94
High
vBulletin 5 CONNECT remote code execution
-
CWE-94
High