Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4033)
CVE-2007-4033
CWE-119
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Multiple Cross-Site Scripting Vulnerabilities (4.5.0)
CVE-2022-4698
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (3.2.15)
-
CWE-79
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (4.5.3)
CVE-2023-23996
CWE-79
High
Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-6666)
CVE-2007-6666
CWE-138
High
WordPress Plugin BruteBank-WP Security & Firewall Cross-Site Request Forgery (1.8)
CVE-2022-4443
CWE-352
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Arbitrary File Upload (6.4)
-
CWE-434
High
WordPress Plugin Restaurant Menu-Food Ordering System-Table Reservation Security Bypass (2.3.0)
CVE-2022-2696
CWE-862
High
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-2999)
CVE-2008-2999
CWE-138
High
WordPress Plugin Simple Video Embedder Cross-Site Scripting (2.2)
CVE-2022-44590
CWE-79
High
MyBB CVE-2008-3070 Vulnerability (CVE-2008-3070)
CVE-2008-3070
-
High
MyBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3071)
CVE-2008-3071
CWE-22
High
Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2008-3142)
CVE-2008-3142
CWE-120
High
Python Integer Overflow or Wraparound Vulnerability (CVE-2008-3143)
CVE-2008-3143
CWE-190
High
WordPress Plugin Seed Social Cross-Site Scripting (2.0.3)
CVE-2022-3836
CWE-79
High
WordPress Plugin Salon Booking System Multiple Information Disclosure Vulnerabilities (7.6.2)
CVE-2022-0920
CWE-200
High
WordPress Plugin Salon Booking System Cross-Site Scripting (7.9.3)
CVE-2022-43487
CWE-79
High
WordPress Plugin Restaurant Menu-Food Ordering System-Table Reservation Cross-Site Request Forgery (2.3.1)
CVE-2022-3776
CWE-352
High
WordPress Plugin TeraWallet-For WooCommerce Insecure Direct Object Reference (1.4.3)
CVE-2022-3995
CWE-639
High
WordPress Plugin PostmagThemes Demo Import Arbitrary File Upload (1.0.7)
CVE-2022-1540
CWE-434
High
WordPress Plugin Plug your WooCommerce into the largest catalog of customized print products from Helloprint Cross-Site Scripting (1.4.6)
CVE-2022-3908
CWE-79
High
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3223)
CVE-2008-3223
CWE-138
High
WordPress Plugin Photospace Gallery Cross-Site Scripting (2.3.5)
CVE-2022-3991
CWE-79
High
Joomla Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3227)
CVE-2008-3227
CWE-59
High
Joomla Configuration Vulnerability (CVE-2008-3228)
CVE-2008-3228
-
High
WordPress Plugin Permalink Manager Lite Cross-Site Scripting (2.2.14)
CVE-2022-0201
CWE-79
High
WordPress Plugin Permalink Manager Lite Cross-Site Request Forgery (2.2.19.2)
-
CWE-352
High
WordPress Plugin Permalink Manager Lite Cross-Site Request Forgery (2.2.20.1)
CVE-2022-4021
CWE-352
High
WordPress Plugin Log HTTP Requests Cross-Site Scripting (1.3.1)
CVE-2022-3402
CWE-79
High
WordPress Plugin SVG Support Cross-Site Scripting (2.5.1)
CVE-2022-4022
CWE-79
High
WordPress Plugin Theme Demo Import Arbitrary File Upload (1.1.0)
CVE-2022-1538
CWE-434
High
WordPress Plugin Form Vibes-Database Manager for Forms Unspecified Vulnerability (1.4.2)
-
-
High
Ruby Resource Management Errors Vulnerability (CVE-2008-2664)
CVE-2008-2664
-
High
WordPress Plugin White Label CMS PHP Object Injection (2.4)
CVE-2022-4302
CWE-915
High
WordPress Plugin White Label CMS Cross-Site Scripting (2.2.8)
CVE-2022-0422
CWE-79
High
WordPress Plugin Team Members Cross-Site Scripting (5.1.0)
CVE-2022-1568
CWE-79
High
WordPress Plugin Team Members Cross-Site Scripting (5.2.0)
CVE-2022-3936
CWE-79
High
WordPress Plugin iubenda-All-in-one Compliance for GDPR/CCPA Cookie Consent + more Privilege Escalation (3.3.2)
CVE-2022-3911
CWE-269
High
WordPress Plugin Custom Field Template PHP Object Injection (2.5.7)
CVE-2022-4324
CWE-915
High
WordPress Plugin WPUpper Share Buttons Cross-Site Scripting (3.42)
CVE-2022-3838
CWE-79
High
WordPress Plugin WP Page Builder Cross-Site Scripting (1.2.6)
CVE-2022-40963
CWE-79
High
WordPress Plugin WP Page Builder Cross-Site Scripting (1.2.8)
CVE-2022-3830
CWE-79
High
WordPress Plugin WP OAuth Server (OAuth Authentication) Cross-Site Scripting (4.2.1)
CVE-2022-3892
CWE-79
High
WordPress Plugin WP CSV Exporter SQL Injection (1.3.6)
CVE-2022-3249
CWE-89
High
WordPress Plugin Uji Countdown Cross-Site Scripting (2.2)
CVE-2022-3837
CWE-79
High
WordPress Plugin WP Affiliate Platform Multiple Vulnerabilities (6.3.9)
CVE-2022-3898
CWE-352
High
WordPress Plugin Wordpress Countdown Widget Cross-Site Scripting (3.1.9.2)
CVE-2022-2944
CWE-79
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.3.7.2)
CVE-2021-25043
CWE-79
High
Ruby Numeric Errors Vulnerability (CVE-2008-2725)
CVE-2008-2725
-
High
Ruby Numeric Errors Vulnerability (CVE-2008-2726)
CVE-2008-2726
-
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.3.7)
CVE-2021-24938
CWE-79
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.3.7.4)
CVE-2022-0234
CWE-79
High
WordPress Plugin Web Stories Server-Side Request Forgery (1.24.0)
CVE-2022-3708
CWE-918
High
WordPress Plugin VR Calendar Cross-Site Request Forgery (2.3.3)
CVE-2022-3852
CWE-352
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Vulnerabilities (2.5.0)
CVE-2022-3384
CWE-94
High
WordPress Plugin ImageMagick Engine Cross-Site Request Forgery (1.7.4)
CVE-2022-2441
CWE-352
High
XOOPS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3296)
CVE-2008-3296
CWE-22
High
WordPress Plugin All-in-One Addons for Elementor-WidgetKit Cross-Site Scripting (2.4.3)
CVE-2022-4256
CWE-79
High
WordPress Plugin Manage Notification E-mails Cross-Site Request Forgery (1.8.2)
CVE-2022-34654
CWE-352
High
WordPress Plugin Tabs-Responsive Tabs with WooCommerce Product Tab Extension Cross-Site Scripting (3.7.1)
CVE-2022-40215
CWE-79
High
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk SQL Injection (5.185)
CVE-2022-3302
CWE-89
High
Ampache Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3929)
CVE-2008-3929
CWE-59
High
WordPress Plugin Search Logger-Know What Your Visitors Search SQL Injection (0.9)
CVE-2022-3131
CWE-89
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3965)
CVE-2008-3965
CWE-138
High
WordPress Plugin Retain Live Chat Cross-Site Scripting (0.1)
CVE-2022-3391
CWE-79
High
MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3967)
CVE-2008-3967
CWE-264
High
WordPress Plugin Post to CSV by BestWebSoft CSV Injection (1.4.0)
CVE-2022-3393
CWE-1236
High
WordPress Plugin Passster-Password Protection Weak Encoding (3.5.5.5.1)
CVE-2022-3206
CWE-326
High
WordPress Plugin miniOrange Discord Integration Security Bypass (2.1.5)
CVE-2022-3082
CWE-284
High
WordPress Plugin LBstopattack Cross-Site Request Forgery (1.1.2)
CVE-2022-3097
CWE-352
High
WordPress Plugin Tabs-Responsive Tabs with WooCommerce Product Tab Extension Security Bypass (3.5.4)
-
CWE-862
High
WordPress Plugin Kraken.io Image Optimizer Cross-Site Request Forgery (2.6.5)
CVE-2022-38454
CWE-352
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4094)
CVE-2008-4094
CWE-138
High
phpMyAdmin Improper Input Validation Vulnerability (CVE-2008-4096)
CVE-2008-4096
CWE-20
High
WordPress Plugin Kadence WooCommerce Email Designer PHP Object Injection (1.5.6)
CVE-2022-3335
CWE-915
High