Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23409 vulnerabilities in this category.

Critical: 1513 High: 12591 Medium: 8518 Low: 783 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (4.5.3)
CVE-2023-23996
CWE-79
High
WordPress Plugin Ocean Extra Multiple Vulnerabilities (2.1.2)
CVE-2023-24399
CWE-639
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (4.5.4)
CVE-2023-23820
CWE-79
High
WordPress Plugin Page Builder:Live Composer Cross-Site Scripting (1.5.22)
CVE-2022-4669
CWE-79
High
WordPress Plugin Optimize images ALT Text (alt tag) & names for SEO using AI Cross-Site Request Forgery (2.0.7)
CVE-2022-4548
CWE-352
High
Joomla Other Vulnerability (CVE-2007-4184)
CVE-2007-4184
-
High
WordPress Plugin Opening Hours Cross-Site Scripting (2.3.0)
CVE-2022-4752
CWE-79
High
WordPress Plugin Olevmedia Shortcodes Multiple Cross-Site Scripting Vulnerabilities (1.1.9)
CVE-2023-25798
CWE-79
High
WordPress Plugin Oi Yandex.Maps for WordPress Cross-Site Scripting (3.2.7)
CVE-2023-22721
CWE-79
High
PHP Other Vulnerability (CVE-2007-4255)
CVE-2007-4255
-
High
Frontaccounting Other Vulnerability (CVE-2007-4279)
CVE-2007-4279
-
High
WordPress Plugin Ocean Extra PHP Object Injection (2.0.4)
CVE-2022-3374
CWE-915
High
WordPress Plugin Ocean Extra Cross-Site Scripting (2.1.1)
CVE-2023-23891
CWE-79
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4661)
CVE-2007-4661
CWE-119
High
WordPress Plugin Ocean Extra Cross-Site Scripting (1.9.4)
CVE-2021-25104
CWE-79
High
WordPress Plugin Namaste! LMS Cross-Site Scripting (2.5.9.3)
CVE-2023-0548
CWE-79
High
WordPress Plugin Namaste! LMS Cross-Site Scripting (2.5.9.4)
-
CWE-79
High
WordPress Plugin Mongoose Page Cross-Site Scripting (1.8.3)
CVE-2022-4675
CWE-79
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4586)
CVE-2007-4586
CWE-119
High
WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Cross-Site Scripting (3.1.2)
CVE-2023-0084
CWE-79
High
phpBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-4653)
CVE-2007-4653
CWE-138
High
PHP Numeric Errors Vulnerability (CVE-2007-4657)
CVE-2007-4657
-
High
PHP Other Vulnerability (CVE-2007-4658)
CVE-2007-4658
-
High
PHP Other Vulnerability (CVE-2007-4659)
CVE-2007-4659
-
High
PHP Resource Management Errors Vulnerability (CVE-2007-4660)
CVE-2007-4660
-
High
WordPress Plugin 10Web Map Builder for Google Maps SQL Injection (1.0.72)
-
CWE-89
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0383)
CVE-2008-0383
CWE-138
High
WordPress Plugin Zephyr Project Manager Cross-Site Scripting (3.2.40)
CVE-2022-1822
CWE-79
High
Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3655)
CVE-2008-3655
CWE-264
High
WordPress Plugin Floating Chat Widget:Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button-Chaty SQL Injection (3.0.2)
CVE-2022-3858
CWE-89
High
WordPress Plugin Floating Chat Widget:Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button-Chaty Multiple Cross-Site Scripting Vulnerabilities (2.8.3)
CVE-2021-36846
CWE-79
High
WordPress Plugin Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list CSV Injection (2.0.68)
CVE-2022-3603
CWE-1236
High
WordPress Plugin Comic Book Management System SQL Injection (2.1.0)
CVE-2022-3856
CWE-89
High
WordPress Plugin Clerk Security Bypass (3.8.3)
CVE-2022-3907
CWE-200
High
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.11.19)
CVE-2022-3922
CWE-79
High
WordPress Plugin BeCustom Cross-Site Request Forgery (1.0.5.2)
CVE-2022-3747
CWE-352
High
Coppermine Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-3481)
CVE-2008-3481
CWE-94
High
Coppermine Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3486)
CVE-2008-3486
CWE-22
High
WordPress Plugin Advanced WP Columns Cross-Site Scripting (2.0.6)
CVE-2022-3426
CWE-79
High
Ruby Resource Management Errors Vulnerability (CVE-2008-3656)
CVE-2008-3656
-
High
WordPress Plugin Form Vibes-Database Manager for Forms SQL Injection (1.4.5)
CVE-2022-3764
CWE-89
High
Ruby Improper Input Validation Vulnerability (CVE-2008-3657)
CVE-2008-3657
CWE-20
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2008-3658)
CVE-2008-3658
CWE-119
High
WordPress Plugin Advanced Import:One Click Import for WordPress or Theme Demo Data Cross-Site Request Forgery (1.3.7)
CVE-2022-3677
CWE-352
High
WordPress Plugin Add Comments Cross-Site Scripting (1.0.1)
CVE-2022-3909
CWE-79
High
WordPress Plugin 3DPrint Cross-Site Request Forgery (3.5.4.7)
CVE-2022-3899
CWE-352
High
WordPress Plugin WP Super Cache Cache Poisoning (1.8)
-
CWE-349
High
WordPress Plugin WP Humans.txt Cross-Site Scripting (1.0.6)
CVE-2022-3392
CWE-79
High
WordPress Plugin WP Custom Cursors Multiple Vulnerabilities (3.0)
CVE-2022-3151
CWE-352
High
WordPress Plugin WP ALL Export Pro Multiple Vulnerabilities (1.7.8)
CVE-2022-3395
CWE-94
High
WordPress Plugin We�re Open! Cross-Site Scripting (1.41)
CVE-2022-3139
CWE-79
High
WordPress Plugin Follow Me Cross-Site Request Forgery (3.1.1)
CVE-2022-3240
CWE-352
High
XOOPS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3296)
CVE-2008-3296
CWE-22
High
WordPress Plugin Tabs-Responsive Tabs with WooCommerce Product Tab Extension Security Bypass (3.5.4)
-
CWE-862
High
WordPress Plugin Restaurant Menu-Food Ordering System-Table Reservation Cross-Site Request Forgery (2.3.1)
CVE-2022-3776
CWE-352
High
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-2999)
CVE-2008-2999
CWE-138
High
WordPress Plugin Simple Video Embedder Cross-Site Scripting (2.2)
CVE-2022-44590
CWE-79
High
MyBB CVE-2008-3070 Vulnerability (CVE-2008-3070)
CVE-2008-3070
-
High
MyBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3071)
CVE-2008-3071
CWE-22
High
Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2008-3142)
CVE-2008-3142
CWE-120
High
Python Integer Overflow or Wraparound Vulnerability (CVE-2008-3143)
CVE-2008-3143
CWE-190
High
WordPress Plugin Seed Social Cross-Site Scripting (2.0.3)
CVE-2022-3836
CWE-79
High
WordPress Plugin Salon Booking System Multiple Information Disclosure Vulnerabilities (7.6.2)
CVE-2022-0920
CWE-200
High
WordPress Plugin Salon Booking System Cross-Site Scripting (7.9.3)
CVE-2022-43487
CWE-79
High
WordPress Plugin Restaurant Menu-Food Ordering System-Table Reservation Security Bypass (2.3.0)
CVE-2022-2696
CWE-862
High
WordPress Plugin PostmagThemes Demo Import Arbitrary File Upload (1.0.7)
CVE-2022-1540
CWE-434
High
WordPress Plugin Form Vibes-Database Manager for Forms Unspecified Vulnerability (1.4.2)
-
-
High
WordPress Plugin Plug your WooCommerce into the largest catalog of customized print products from Helloprint Cross-Site Scripting (1.4.6)
CVE-2022-3908
CWE-79
High
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3223)
CVE-2008-3223
CWE-138
High
WordPress Plugin Photospace Gallery Cross-Site Scripting (2.3.5)
CVE-2022-3991
CWE-79
High
Joomla Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3227)
CVE-2008-3227
CWE-59
High
Joomla Configuration Vulnerability (CVE-2008-3228)
CVE-2008-3228
-
High
WordPress Plugin Permalink Manager Lite Cross-Site Scripting (2.2.14)
CVE-2022-0201
CWE-79
High
WordPress Plugin Permalink Manager Lite Cross-Site Request Forgery (2.2.19.2)
-
CWE-352
High
WordPress Plugin Permalink Manager Lite Cross-Site Request Forgery (2.2.20.1)
CVE-2022-4021
CWE-352
High