Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
Oracle Database Server CVE-2010-0911 Vulnerability (CVE-2010-0911)
CVE-2010-0911
-
High
WordPress Plugin WordPress Slider-WP 1 Slider includes Backdoor [Only if downloaded via the vendor website] (1.2.9)
CVE-2021-24867
CWE-912
High
WordPress Plugin WordPress Email Template Designer-WP HTML Mail Cross-Site Scripting (3.0.9)
CVE-2022-0218
CWE-79
High
WordPress Plugin Essential Addons for Elementor Cross-Site Scripting (5.0.8)
CVE-2022-0683
CWE-79
High
WordPress Plugin Stylish Price List Security Bypass (6.8.14)
CVE-2021-24757
CWE-863
High
WordPress Plugin Themify Builder Cross-Site Scripting (5.3.1)
-
CWE-79
High
WordPress Plugin The Easiest WordPress Media Manager-WP Media Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.2)
CVE-2021-24867
CWE-912
High
WordPress Plugin Testimonial WordPress-AP Custom Testimonial Unspecified Vulnerability (1.4.7)
-
-
High
Serendipity Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1916)
CVE-2010-1916
CWE-264
High
WordPress Plugin Testimonial WordPress-AP Custom Testimonial includes Backdoor [Only if downloaded via the vendor website] (1.4.6)
CVE-2021-24867
CWE-912
High
CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-1931)
CVE-2010-1931
CWE-138
High
WordPress Plugin TAuto Poster includes Backdoor [Only if downloaded via the vendor website] (1.4.5)
CVE-2021-24867
CWE-912
High
WordPress Plugin Subscriptions & Memberships for PayPal Unspecified Vulnerability (1.1.5)
-
-
High
WordPress Plugin Subscriptions & Memberships for PayPal Cross-Site Scripting (1.1.2)
-
CWE-79
High
WordPress Plugin Stylish Price List Security Bypass (6.9.0)
CVE-2021-24770
CWE-863
High
WordPress Plugin Storefront Footer Text Cross-Site Scripting (1.0.1)
CVE-2021-24607
CWE-79
High
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1868)
CVE-2010-1868
CWE-94
High
WordPress Plugin St-Daily-Tip Cross-Site Request Forgery (4.7)
CVE-2021-24487
CWE-352
High
WordPress Plugin Sports Rankings and Lists Cross-Site Scripting (3.5)
-
CWE-79
High
e107 Other Vulnerability (CVE-2010-2098)
CVE-2010-2098
-
High
e107 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-2099)
CVE-2010-2099
CWE-264
High
WordPress Plugin Social Review includes Backdoor [Only if downloaded via the vendor website] (1.0.8)
CVE-2021-24867
CWE-912
High
WordPress Plugin Social Auto Poster includes Backdoor [Only if downloaded via the vendor website] (2.1.3)
CVE-2021-24867
CWE-912
High
WordPress Plugin Smartest Way To Design & Customize WordPress Comments & Comment Form-WP Comment Designer Lite includes Backdoor [Only if downloaded via the vendor website] (2.0.3)
CVE-2021-24867
CWE-912
High
WordPress Plugin Smart Scroll Posts for WordPress includes Backdoor [Only if downloaded via the vendor website] (2.0.8)
CVE-2021-24867
CWE-912
High
WordPress Plugin Simple Download Monitor Multiple Vulnerabilities (3.9.5.1)
CVE-2021-24698
CWE-264
High
PHP Resource Management Errors Vulnerability (CVE-2010-2225)
CVE-2010-2225
-
High
WordPress Plugin to Manage/Design WordPress Blog-WP Blog Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin Total GDPR Compliance Lite-WordPress for GDPR Compatibility includes Backdoor [Only if downloaded via the vendor website] (1.0.4)
CVE-2021-24867
CWE-912
High
WordPress Plugin WordPress Easy Custom Js And Css Cross-Site Scripting (1.1.2)
-
CWE-79
High
phpBB CVE-2010-1630 Vulnerability (CVE-2010-1630)
CVE-2010-1630
-
High
WordPress Plugin WordPress Download Manager Cross-Site Scripting (3.2.15)
CVE-2021-24773
CWE-79
High
WordPress Plugin WordPress Download Manager Cross-Site Scripting (3.2.21)
CVE-2021-24969
CWE-79
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-1615)
CVE-2010-1615
CWE-138
High
WordPress Plugin WordPress Contact Forms by Cimatti Cross-Site Scripting (1.4.11)
CVE-2021-24744
CWE-79
High
WordPress Plugin WordPress Backend Customizer-Everest Admin Theme Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin WooCommerce Security Bypass (5.6.0)
-
CWE-284
High
WordPress Plugin WooCommerce Product Table Lite Cross-Site Scripting (2.3.0)
-
CWE-79
High
WordPress Plugin WooCommerce Admin Security Bypass (2.6.3)
-
CWE-284
High
WordPress Plugin WHMCS Bridge Cross-Site Scripting (6.2)
CVE-2021-4074
CWE-79
High
WordPress Plugin WCFM-Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible Unspecified Vulnerability (6.5.12)
-
-
High
WordPress Plugin WCFM-Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible SQL Injection (6.5.11)
CVE-2021-24835
CWE-89
High
WordPress Plugin Total Team Lite-Responsive Team Manager/Showcase for WordPress includes Backdoor [Only if downloaded via the vendor website] (1.1.1)
CVE-2021-24867
CWE-912
High
WordPress Plugin Waitlist Woocommerce (Back in stock notifier) Cross-Site Request Forgery (2.5.1)
CVE-2022-0215
CWE-352
High
WordPress Plugin Visual Form Builder Unspecified Vulnerability (3.0.5)
-
-
High
WordPress Plugin Visual Form Builder Cross-Site Scripting (3.0.3)
CVE-2021-24514
CWE-79
High
WordPress Plugin Visitor Traffic Real Time Statistics Unspecified Vulnerability (4.2)
-
-
High
WordPress Plugin Visitor Traffic Real Time Statistics SQL Injection (3.8)
CVE-2021-24829
CWE-89
High
WordPress Plugin Vision Interactive For WordPress Cross-Site Scripting (1.4.4)
-
CWE-79
High
WordPress Plugin Video Player for YouTube Cross-Site Scripting (1.3)
CVE-2021-24414
CWE-79
High
WordPress Plugin Video Gallery-Vimeo and YouTube Gallery Cross-Site Scripting (1.1.4)
CVE-2021-24515
CWE-79
High
WordPress Plugin User Registration, Login & Landing Pages-LeadMagic Cross-Site Scripting (1.2.7)
CVE-2022-0232
CWE-79
High
WordPress Plugin Ultimate Coming Soon, Maintenance Mode for WordPress-Everest Coming Soon Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin Two Way CHAT-Send or receive messages to your user Multiple Vulnerabilities (3.1.4)
-
CWE-352
High
osTicket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-0605)
CVE-2010-0605
CWE-138
High
WordPress Plugin Fancy Product Designer-WooCommerce SQL Injection (4.7.4)
CVE-2021-4134
CWE-89
High
WordPress Plugin Registrations for the Events Calendar-Event Registration Cross-Site Scripting (2.7.4)
CVE-2021-24876
CWE-79
High
WordPress Plugin Email Before Download SQL Injection (3.4)
-
CWE-89
High
WordPress Plugin GenerateBlocks Cross-Site Scripting (1.3.5)
CVE-2021-24751
CWE-79
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Unspecified Vulnerability (1.14.11)
-
-
High
XOOPS CVE-2009-3963 Vulnerability (CVE-2009-3963)
CVE-2009-3963
-
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Unspecified Vulnerability (1.14.9)
-
-
High
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-4018)
CVE-2009-4018
CWE-264
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Scripting (1.15.2)
CVE-2021-24700
CWE-79
High
WordPress Plugin Falang multilanguage for WordPress Cross-Site Scripting (1.3.17)
-
CWE-79
High
WordPress Plugin Email Before Download Unspecified Vulnerability (6.9.3)
-
-
High
WordPress Plugin Email Before Download SQL Injection (6.7)
CVE-2021-24748
CWE-89
High
Frontaccounting Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4037)
CVE-2009-4037
CWE-138
High
WordPress Plugin Email Before Download SQL Injection (3.6)
-
CWE-89
High
WordPress Plugin Header Footer Code Manager Cross-Site Scripting (1.1.16)
CVE-2022-0710
CWE-79
High
Frontaccounting Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4045)
CVE-2009-4045
CWE-138
High
CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4060)
CVE-2009-4060
CWE-138
High
WordPress Plugin Elementor Website Builder Cross-Site Scripting (3.4.7)
CVE-2021-24891
CWE-79
High
WordPress Plugin Ecommerce-Two Factor Authentication Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin eCommerce Product Catalog for WordPress Cross-Site Scripting (3.0.38)
CVE-2021-24875
CWE-79
High