Invicti named a Leader in IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Read now.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
MSSP
Partners
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Missing Update
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Missing Update
This page lists
23975 vulnerabilities
in this category.
Critical: 1584
High: 12800
Medium: 8788
Low: 799
Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WPCB Cross-Site Scripting (2.4.8)
CVE-2014-4581
CWE-79
High
WordPress Plugin wpCommentTwit Cross-Site Request Forgery (0.5)
CVE-2014-9340
CWE-352
High
WordPress Plugin WPE Indoshipping Multiple Remote File Inclusion Vulnerabilities (2.5.0)
-
CWE-94
High
WordPress Plugin Wu-Rating Cross-Site Scripting (1.0 12319)
CVE-2014-4601
CWE-79
High
WordPress Plugin yURL ReTwitt Cross-Site Request Forgery (1.4)
CVE-2014-9341
CWE-352
High
WordPress Plugin Acobot Live Chat & Contact Form Multiple Vulnerabilities (2.0)
CVE-2015-2039
CWE-352
High
WordPress Plugin ActiveHelper LiveHelp Live Chat Multiple Cross-Site Scripting Vulnerabilities (3.1.0)
CVE-2014-4513
CWE-79
High
WordPress Plugin AdPlugg WordPress Ad Cross-Site Scripting (1.1.33)
-
CWE-79
High
WordPress Plugin All-in-One Event Calendar Multiple Vulnerabilities (1.9)
-
CWE-89
High
WordPress Plugin All-in-One Event Calendar Multiple Vulnerabilities (1.10-standard)
-
CWE-89
High
WordPress Plugin All Video Gallery SQL Injection (1.2)
CVE-2014-5186
CWE-89
High
WordPress Plugin AnyFont Cross-Site Scripting (2.2.3)
CVE-2014-4515
CWE-79
High
WordPress Plugin Banner Effect Header Cross-Site Scripting (1.2.7)
CVE-2015-1384
CWE-79
High
WordPress Plugin BIC Media Widget Cross-Site Scripting (1.0)
CVE-2014-4516
CWE-79
High
WordPress Plugin Blue Wrench Video Widget Cross-Site Request Forgery (1.0.5)
CVE-2013-6797
CWE-352
High
WordPress Plugin BookX Local File Inclusion (1.7)
CVE-2014-4937
CWE-22
High
WordPress Plugin Calendar by WD-Responsive Event Calendar for WordPress SQL Injection (1.4.9)
CVE-2015-2196
CWE-89
High
WordPress Plugin Cart66 Lite::WordPress Ecommerce Cross-Site Scripting (1.5.4)
-
CWE-79
High
WordPress Plugin CBI Referral Manager Cross-Site Scripting (1.2.1)
CVE-2014-4517
CWE-79
High
WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.3)
-
CWE-434
High
WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.2)
-
CWE-434
High
WordPress Plugin Contact Form DB Cross-Site Scripting (2.8.27)
CVE-2015-2040
CWE-79
High
WordPress Plugin Conversador Cross-Site Scripting (2.61)
CVE-2014-4519
CWE-79
High
WordPress Plugin CrossSlide jQuery Multiple Vulnerabilities (2.0.5)
CVE-2015-2089
CWE-352
High
WordPress Plugin DMCA WaterMarker Cross-Site Scripting (1.0)
CVE-2014-4520
CWE-79
High
WordPress Plugin dsIDXpress IDX Cross-Site Scripting (2.1.0)
CVE-2014-4521
CWE-79
High
WordPress Plugin dsSearchAgent:WordPress Edition Cross-Site Scripting (1.0-beta10)
CVE-2014-4522
CWE-79
High
WordPress Plugin Duplicator-WordPress Migration Security Bypass (0.5.8)
CVE-2014-9262
CWE-264
High
WordPress Plugin Easing Slider Multiple Cross-Site Scripting Vulnerabilities (2.2.0.6)
CVE-2015-1436
CWE-79
High
WordPress Plugin Easy Career Openings Cross-Site Scripting (0.4)
CVE-2014-4523
CWE-79
High
WordPress Plugin Easy Social Icons Multiple Vulnerabilities (1.2.2)
CVE-2015-2084
CWE-352
High
WordPress Plugin eBay Feeds for WordPress Cross-Site Scripting (1.0)
CVE-2014-4525
CWE-79
High
WordPress Plugin Efence Multiple Cross-Site Scripting Vulnerabilities (1.3.2)
CVE-2014-4526
CWE-79
High
WordPress Plugin EMC2 Custom Help Videos Cross-Site Scripting (1.2)
-
CWE-79
High
WordPress Plugin Encrypted Blog Multiple Vulnerabilities (0.0.6.2)
-
CWE-601
High
WordPress Plugin EnvialoSimple:Email Marketing y Newsletters Multiple Cross-Site Scripting Vulnerabilities (1.97)
CVE-2014-4527
CWE-79
High
WordPress Plugin Facebook Promotion Generator for WordPress Multiple Cross-Site Scripting Vulnerabilities (1.3.4)
CVE-2014-4528
CWE-79
High
WordPress Plugin FancyBox for WordPress Cross-Site Scripting (3.0.2)
-
CWE-79
High
WordPress Plugin FancyBox for WordPress Security Bypass (3.0.2)
CVE-2015-1494
CWE-264
High
WordPress Plugin Flash Photo Gallery Cross-Site Scripting (0.7)
CVE-2014-4529
CWE-79
High
WordPress Plugin Flog Cross-Site Scripting (0.1)
CVE-2014-4530
CWE-79
High
WordPress Plugin Game tabs Cross-Site Scripting (0.4.0)
CVE-2014-4531
CWE-79
High
WordPress Plugin GarageSale Cross-Site Scripting (1.2.2)
CVE-2014-4532
CWE-79
High
WordPress Plugin GdeSlon Affiliate Shop Open Redirect (2.0)
-
CWE-601
High
WordPress Plugin GEO Redirector Cross-Site Scripting (1.0.1)
CVE-2014-4533
CWE-79
High
WordPress Plugin Global Flash Galleries Cross-Site Scripting (0.13.4)
-
CWE-79
High
WordPress Plugin Gmedia Photo Gallery Cross-Site Scripting (0.9.3)
-
CWE-79
High
WordPress Plugin Google Doc Embedder Cross-Site Scripting (2.5.18)
CVE-2015-1879
CWE-79
High
WordPress Plugin Gravity Forms Arbitrary File Upload (1.8.19)
-
CWE-434
High
WordPress Plugin HDW Player (Video Player & Video Gallery) SQL Injection (2.4.2)
CVE-2014-5180
CWE-89
High
WordPress Plugin Hot Files:File Sharing and Download Manager Cross-Site Scripting (1.0.0)
CVE-2014-4588
CWE-79
High
WordPress Plugin HTML5 jQuery Audio Player Multiple Cross-Site Scripting Vulnerabilities (2.3)
-
CWE-79
High
WordPress Plugin HTML5 Lyrics Karaoke Player Cross-Site Scripting (1.06)
-
CWE-79
High
WordPress Plugin HTML5 Video Player with Playlist Multiple Cross-Site Scripting Vulnerabilities (2.40)
CVE-2014-4534
CWE-79
High
WordPress Plugin Image Metadata Cruncher Multiple Vulnerabilities (1.8)
CVE-2015-1614
CWE-352
High
WordPress Plugin Import Legacy Media Cross-Site Scripting (0.1)
CVE-2014-4535
CWE-79
High
WordPress Plugin Infusionsoft Gravity Forms Add-on Multiple Cross-Site Scripting Vulnerabilities (1.5.6)
CVE-2014-4536
CWE-79
High
WordPress Plugin jRSS Widget Server-Side Request Forgery (1.2)
CVE-2014-9292
CWE-918
High
WordPress Plugin Kindeditor For WordPress Cross-Site Scripting (1.3.3)
-
CWE-79
High
WordPress Plugin Last.fm Rotation Local File Inclusion (1.0)
CVE-2014-5181
CWE-22
High
WordPress Plugin Local Weather Cross-Site Scripting (1.0)
CVE-2014-4561
CWE-79
High
WordPress Plugin Malware Finder Cross-Site Scripting (1.1)
CVE-2014-4538
CWE-79
High
WordPress Plugin Mobile Domain Multiple Vulnerabilities (1.5.2)
CVE-2015-1581
CWE-352
High
WordPress Plugin MobileChief-Mobile Site Builder Cross-Site Scripting (1.5.7)
-
CWE-79
High
WordPress Plugin Movies Cross-Site Scripting (0.6)
CVE-2014-4539
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.8.8)
CVE-2015-2220
CWE-79
High
WordPress Plugin Oleggo LiveStream Cross-Site Scripting (0.2.6)
CVE-2014-4540
CWE-79
High
WordPress Plugin OMFG Mobile Pro Cross-Site Scripting (1.1.26)
CVE-2014-4541
CWE-79
High
WordPress Plugin Ooorl Cross-Site Scripting (1.0.0)
CVE-2014-4542
CWE-79
High
WordPress Plugin Pay Per Media Player Multiple Cross-Site Scripting Vulnerabilities (1.24)
CVE-2014-4543
CWE-79
High
WordPress Plugin Payment Gateways Caller for WP e-Commerce Local File Inclusion (0.1)
-
CWE-22
High
WordPress Plugin Podcast Channels Cross-Site Scripting (0.20)
CVE-2014-4544
CWE-79
High
WordPress Plugin Polldaddy Polls & Ratings Cross-Site Request Forgery (2.0.20)
-
CWE-352
High
WordPress Plugin Pro Quoter Multiple Cross-Site Scripting Vulnerabilities (1.0)
CVE-2014-4545
CWE-79
High
WordPress Plugin Product Catalog Multiple SQL Injection Vulnerabilities (2.1)
-
CWE-89
High
«
1
...
103
104
105
...
320
»