Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
Internet Information Services Improper Authentication Vulnerability (CVE-2009-1535)
CVE-2009-1535
CWE-287
High
WordPress Plugin Craw Data Server-Side Request Forgery (1.0.0)
CVE-2022-2912
CWE-918
High
WordPress Plugin Cool Timeline (Horizontal & Vertical Timeline) Security Bypass (2.3.3)
-
CWE-94
High
Apache HTTP Server Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2009-1955)
CVE-2009-1955
CWE-776
High
LimeSurvey CVE-2009-1604 Vulnerability (CVE-2009-1604)
CVE-2009-1604
-
High
WordPress Plugin Contact Form DB-Elementor Cross-Site Scripting (1.7)
CVE-2022-2116
CWE-79
High
WordPress Plugin CM Download Manager Arbitrary File Upload (2.8.5)
CVE-2022-3076
CWE-434
High
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2009-1890)
CVE-2009-1890
CWE-400
High
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2009-1891)
CVE-2009-1891
CWE-400
High
WordPress Plugin Classified Listing Store & Membership Cross-Site Scripting (1.4.19)
CVE-2022-2654
CWE-79
High
WordPress Plugin Classified Listing Pro & Directory Cross-Site Scripting (2.0.19)
CVE-2022-2655
CWE-79
High
WordPress Plugin Classified Listing-Classified ads & Business Directory Cross-Site Scripting (2.2.13)
CVE-2022-2654
CWE-79
High
WordPress Plugin CallRail Phone Call Tracking Cross-Site Request Forgery (0.4.9)
CVE-2022-36796
CWE-352
High
WordPress Plugin Calendar Event Multi View Security Bypass (1.4.06)
CVE-2022-2846
CWE-862
High
WordPress Plugin uContext for Amazon Cross-Site Request Forgery (3.9.1)
CVE-2022-2541
CWE-352
High
WordPress Plugin String locator PHAR Deserialization (2.5.0)
CVE-2022-2434
CWE-502
High
WordPress Plugin Donation Thermometer Cross-Site Scripting (2.1.2)
CVE-2022-3128
CWE-79
High
PHP CVE-2009-3292 Vulnerability (CVE-2009-3292)
CVE-2009-3292
-
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2978)
CVE-2009-2978
CWE-138
High
WordPress Plugin Autoptimize Cross-Site Scripting (3.1.0)
CVE-2022-2635
CWE-79
High
WordPress Plugin AnyMind Widget Cross-Site Request Forgery (1.1)
CVE-2022-2435
CWE-352
High
WordPress Plugin All-in-One Video Gallery Multiple Vulnerabilities (2.6.0)
CVE-2022-2633
CWE-918
High
WordPress Plugin WPS Hide Login Security Bypass (1.9)
CVE-2021-24917
CWE-264
High
WordPress Plugin WP Spell Check Cross-Site Scripting (9.2)
-
CWE-79
High
WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Cross-Site Scripting (4.19.3)
CVE-2022-0189
CWE-79
High
WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Cross-Site Scripting (4.19.2)
CVE-2021-24988
CWE-79
High
WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Cross-Site Scripting (4.19.1)
CVE-2021-24768
CWE-79
High
PHP Improper Input Validation Vulnerability (CVE-2009-3291)
CVE-2009-3291
CWE-20
High
PHP CVE-2009-3293 Vulnerability (CVE-2009-3293)
CVE-2009-3293
-
High
WordPress Plugin Banner Cycler Cross-Site Request Forgery (1.4)
CVE-2022-2233
CWE-352
High
WordPress Plugin Video Lessons Manager-Video Lessons LMS for eLearning Site Cross-Site Scripting (3.5.8)
CVE-2021-24713
CWE-79
High
WordPress Plugin Video Lessons Manager-Best Video Course LMS Cross-Site Scripting (1.7.1)
CVE-2021-24713
CWE-79
High
WordPress Plugin Stylish Cost Calculator Cross-Site Scripting (7.0.3)
CVE-2021-24822
CWE-79
High
WordPress Plugin Social Sharing-Sassy Social Share Cross-Site Scripting (3.3.25)
-
CWE-79
High
WordPress Plugin Smash Balloon Social Post Feed Security Bypass (4.0)
CVE-2021-24918
CWE-264
High
WordPress Plugin Smash Balloon Social Post Feed Cross-Site Scripting (4.1)
CVE-2021-25065
CWE-79
High
WordPress Plugin Slideshow Gallery LITE Unspecified Vulnerability (1.7.4.2)
-
-
High
WordPress Plugin Slideshow Gallery LITE Cross-Site Scripting (1.7.3)
CVE-2021-24882
CWE-79
High
WordPress Plugin Shop Page WP Cross-Site Scripting (1.2.7)
CVE-2021-24811
CWE-79
High
WordPress Plugin Reviews Plus Denial of Service (1.2.13)
CVE-2021-24894
CWE-400
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2933)
CVE-2009-2933
CWE-138
High
WordPress Plugin Broken Link Checker PHAR Deserialization (1.11.16)
CVE-2022-2438
CWE-502
High
WordPress Plugin Stockists Manager for Woocommerce Cross-Site Request Forgery (1.0.2.1)
CVE-2022-2518
CWE-352
High
WordPress Plugin Image Slider Cross-Site Request Forgery (1.1.121)
CVE-2022-2223
CWE-352
High
WordPress Plugin Simple SEO Cross-Site Scripting (1.7.91)
CVE-2022-1628
CWE-79
High
WordPress Plugin Simple Banner Cross-Site Scripting (2.11.0)
CVE-2022-2515
CWE-79
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.1.3)
-
CWE-79
High
WordPress Plugin Migration, Backup, Staging-WPvivid PHAR Deserialization (0.9.74)
CVE-2022-2442
CWE-502
High
WordPress Plugin Migration, Backup, Staging-WPvivid Arbitrary File Deletion (0.9.76)
-
CWE-22
High
WordPress Plugin Link Optimizer Lite Cross-Site Request Forgery (1.4.5)
CVE-2022-2540
CWE-352
High
WordPress Plugin JoomSport-for Sports: Team & League, Football, Hockey & more Multiple SQL Injection Vulnerabilities (5.2.5)
CVE-2022-2718
CWE-89
High
WordPress Plugin Import any XML or CSV File to WordPress Arbitrary File Upload (3.6.7)
CVE-2022-1565
CWE-434
High
MySQL Use of Externally-Controlled Format String Vulnerability (CVE-2009-2446)
CVE-2009-2446
CWE-134
High
WordPress Plugin Image Slider Unspecified Vulnerability (1.1.119)
-
-
High
WordPress Plugin Gallery for Social Photo Unspecified Vulnerability (1.0.0.25)
-
-
High
WordPress Plugin Download Manager Cross-Site Scripting (3.2.46)
CVE-2022-2101
CWE-79
High
WordPress Plugin Gallery for Social Photo Cross-Site Request Forgery (1.0.0.27)
CVE-2022-2224
CWE-352
High
WordPress Plugin FreeMind WP Browser Cross-Site Request Forgery (1.2)
CVE-2022-2443
CWE-352
High
Nginx Out-of-bounds Write Vulnerability (CVE-2009-2629)
CVE-2009-2629
CWE-787
High
WordPress Plugin Free Live Chat Support Cross-Site Request Forgery (1.0.11)
CVE-2022-2039
CWE-352
High
WordPress Plugin Feed Them Social-for Twitter feed, Youtube and more PHAR Deserialization (2.9.8.5)
CVE-2022-2437
CWE-502
High
WordPress Plugin Feed Them Social-for Twitter feed, Youtube and more Multiple Vulnerabilities (2.9.9)
CVE-2022-2942
CWE-352
High
Apache HTTP Server Improper Locking Vulnerability (CVE-2009-2699)
CVE-2009-2699
CWE-667
High
WordPress Credentials Management Errors Vulnerability (CVE-2009-2762)
CVE-2009-2762
-
High
WordPress Plugin DX Share Selection Cross-Site Request Forgery (1.4)
CVE-2022-2001
CWE-352
High
WordPress Plugin Download Manager PHAR Deserialization (3.2.49)
CVE-2022-2436
CWE-502
High
WordPress Plugin Download Manager Multiple Cross-Site Scripting Vulnerabilities (3.2.48)
-
CWE-79
High
phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-1285)
CVE-2009-1285
CWE-94
High
WordPress Plugin Download Manager Arbitrary File Deletion (3.2.50)
CVE-2022-2431
CWE-73
High
WordPress Plugin Registrations for the Events Calendar-Event Registration SQL Injection (2.7.5)
CVE-2021-24943
CWE-89
High
WordPress Plugin RSVPMaker SQL Injection (9.3.2)
CVE-2022-1768
CWE-89
High
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-7002)
CVE-2008-7002
CWE-264
High
WordPress Plugin SEO Redirection-301 Redirect Manager Unspecified Vulnerability (8.7)
-
-
High
WeBid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-7116)
CVE-2008-7116
CWE-138
High
WordPress Plugin SEO Redirection-301 Redirect Manager Cross-Site Request Forgery (8.9)
CVE-2022-38704
CWE-352
High