Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
Trac CVE-2009-4405 Vulnerability (CVE-2009-4405)
CVE-2009-4405
-
High
WordPress Plugin WP Performance Score Booster-Optimize Speed, Enable Cache & Page Preload Cross-Site Request Forgery (2.0)
CVE-2021-24776
CWE-352
High
WordPress Plugin WP Fastest Cache Multiple Vulnerabilities (0.9.4)
CVE-2021-24870
CWE-352
High
WordPress Plugin WordPress+Microsoft Office 365/Azure AD-LOGIN Cross-Site Scripting (15.3)
CVE-2021-43409
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Security Bypass (1.22.1)
CVE-2022-0633
CWE-264
High
MySQL Out-of-bounds Write Vulnerability (CVE-2009-4484)
CVE-2009-4484
CWE-787
High
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (1.9.14)
-
CWE-79
High
WordPress Plugin Testimonial Cross-Site Scripting (1.5.9)
CVE-2021-24598
CWE-79
High
WordPress Plugin TableOn-WordPress Posts Table Filterable Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin Stream SQL Injection (3.8.1)
CVE-2021-24772
CWE-89
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6124)
CVE-2008-6124
CWE-138
High
WordPress Plugin Ultimate SMS Notifications for WooCommerce CSV Injection (1.4.1)
CVE-2022-2429
CWE-1236
High
WordPress Plugin Simple Download Monitor Multiple Cross-Site Request Forgery Vulnerabilities (3.9.8)
CVE-2021-24696
CWE-352
High
WordPress Plugin Customer Reviews for WooCommerce Local File Inclusion (5.15.0)
CVE-2023-0080
CWE-22
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files SQL Injection (3.1.0.3)
CVE-2023-23489
CWE-89
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (3.1.0.4)
CVE-2023-0380
CWE-79
High
WordPress Plugin Easy Appointments Cross-Site Scripting (3.11.0)
CVE-2022-4668
CWE-79
High
WordPress Plugin Easy Affiliate Links Cross-Site Scripting (3.7.0)
CVE-2023-0375
CWE-79
High
WordPress Plugin Easy Accept Payments for PayPal Cross-Site Scripting (4.9.9)
CVE-2023-0275
CWE-79
High
WordPress Plugin Donation Block For PayPal Unspecified Vulnerability (1.0.0)
-
-
High
WordPress Plugin Donation Block For PayPal Cross-Site Scripting (2.0.0)
CVE-2023-0535
CWE-79
High
Drupal Improper Input Validation Vulnerability (CVE-2007-6299)
CVE-2007-6299
CWE-20
High
WordPress Plugin Ditty WordPress-Responsive Slider, List, and Ticker Display Cross-Site Scripting (3.0.32)
CVE-2023-23874
CWE-79
High
WordPress Plugin Ditty WordPress-Responsive Slider, List, and Ticker Display Cross-Site Scripting (3.0.14)
CVE-2022-0533
CWE-79
High
WordPress Plugin Customer Reviews for WooCommerce Cross-Site Scripting (5.16.0)
CVE-2023-0079
CWE-79
High
WordPress Plugin Easy Social Box/Page Cross-Site Scripting (4.1.2)
CVE-2022-4754
CWE-79
High
WordPress Plugin Custom Add User Cross-Site Scripting (2.0.2)
CVE-2023-0043
CWE-79
High
WordPress Plugin Custom 404 Pro Unspecified Vulnerability (3.7.0)
-
-
High
WordPress Plugin Custom 404 Pro Cross-Site Request Forgery (3.7.1)
CVE-2023-0385
CWE-352
High
WordPress Plugin CPT Bootstrap Carousel Cross-Site Scripting (1.12)
CVE-2022-4834
CWE-79
High
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2007-6423)
CVE-2007-6423
-
High
WordPress Plugin Correos Woocommerce Arbitrary File Download (1.3.0.0)
CVE-2023-0331
CWE-552
High
WordPress Plugin Contextual Related Posts Multiple Vulnerabilities (3.3.1)
-
CWE-862
High
PostgreSQL Improper Authentication Vulnerability (CVE-2007-6601)
CVE-2007-6601
CWE-287
High
WordPress Plugin Contextual Related Posts Cross-Site Scripting (3.3.0)
CVE-2023-0252
CWE-79
High
WordPress Plugin ContentStudio Multiple Vulnerabilities (1.2.5)
CVE-2023-0558
CWE-862
High
WordPress Plugin Easy PayPal Buy Now Button Cross-Site Scripting (1.7.3)
CVE-2022-4628
CWE-79
High
WordPress Plugin Embed PDF Cross-Site Scripting (1.0.6)
CVE-2022-4788
CWE-79
High
Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-6666)
CVE-2007-6666
CWE-138
High
WordPress Plugin Genesis Columns Advanced Cross-Site Scripting (2.0.3)
CVE-2022-4706
CWE-79
High
Oracle Database Server CVE-2007-5520 Vulnerability (CVE-2007-5520)
CVE-2007-5520
-
High
Oracle Application Server CVE-2007-5521 Vulnerability (CVE-2007-5521)
CVE-2007-5521
-
High
Oracle Application Server CVE-2007-5523 Vulnerability (CVE-2007-5523)
CVE-2007-5523
-
High
Oracle Application Server CVE-2007-5524 Vulnerability (CVE-2007-5524)
CVE-2007-5524
-
High
Oracle Application Server CVE-2007-5525 Vulnerability (CVE-2007-5525)
CVE-2007-5525
-
High
Oracle Database Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2007-5554)
CVE-2007-5554
CWE-200
High
WordPress Plugin GigPress Cross-Site Scripting (2.3.27)
CVE-2022-4759
CWE-79
High
WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings SQL Injection (2.2.23)
CVE-2023-0278
CWE-89
High
WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings Cross-Site Scripting (2.2.21)
CVE-2022-4775
CWE-79
High
WordPress Plugin GeoDirectory Location Manager Multiple SQL Injection Vulnerabilities (2.1.0.9)
CVE-2021-24361
CWE-89
High
WordPress Plugin Galleries by Angie Makes Cross-Site Scripting (1.67)
CVE-2022-4795
CWE-79
High
WordPress Plugin EmbedSocial-Social Media Feeds, Reviews and Galleries Cross-Site Scripting (1.1.27)
CVE-2023-0371
CWE-79
High
WordPress Plugin Form for WordPress-Zoho Forms Cross-Site Scripting (3.0)
CVE-2023-0169
CWE-79
High
WordPress Plugin FluentAuth-The Ultimate Authorization & Security for WordPress Security Bypass (1.0.1)
CVE-2022-4746
CWE-693
High
WordPress Plugin FL3R FeelBox Multiple Vulnerabilities (8.1)
CVE-2022-4553
CWE-352
High
phpBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-5688)
CVE-2007-5688
CWE-138
High
WordPress Plugin Extensive VC Addons for WPBakery page builder Local File Inclusion (1.9)
CVE-2023-0159
CWE-22
High
Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5741)
CVE-2007-5741
CWE-94
High
WordPress Plugin EU Cookie Law for GDPR/CCPA Cross-Site Scripting (3.1.6)
CVE-2022-3811
CWE-79
High
Oracle Database Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-5897)
CVE-2007-5897
CWE-119
High
WordPress Plugin Enable Media Replace Directory Traversal (3.6.3)
CVE-2022-2554
CWE-22
High
WordPress Plugin Enable Media Replace Arbitrary File Upload (4.0.1)
CVE-2023-0255
CWE-434
High
WordPress Plugin EmbedStories-Display social media stories Cross-Site Scripting (0.7.4)
CVE-2023-0372
CWE-79
High
Atlassian Jira Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-6619)
CVE-2007-6619
CWE-264
High
WordPress Plugin CBX Petition for WordPress SQL Injection (1.0.3)
CVE-2022-4383
CWE-89
High
Oracle Application Server CVE-2007-5519 Vulnerability (CVE-2007-5519)
CVE-2007-5519
-
High
WordPress Plugin WP Smart Import: Import any XML File to WordPress Cross-Site Scripting (1.0.2)
CVE-2022-40209
CWE-79
High
WordPress Plugin YITH WooCommerce Gift Cards Premium Arbitrary File Upload (3.19.0)
CVE-2022-45359
CWE-434
High
WordPress Plugin WPQA-Builder forms Addon For WordPress Insecure Direct Object Reference (5.9.2)
CVE-2022-3343
CWE-639
High
WordPress Plugin WP User-Custom Registration Forms, Login and User Profile Multiple Vulnerabilities (7.0)
CVE-2022-4519
CWE-89
High
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0491)
CVE-2008-0491
CWE-138
High
WordPress Plugin WP Statistics SQL Injection (13.2.8)
CVE-2022-4230
CWE-89
High
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0611)
CVE-2008-0611
CWE-138
High
XOOPS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0612)
CVE-2008-0612
CWE-22
High
WordPress Plugin WP Statistics Cross-Site Scripting (13.2.1)
CVE-2022-27231
CWE-79
High