Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Passster-Password Protection Security Bypass (3.5.5.8)
CVE-2021-24881
CWE-284
High
WordPress Plugin Passster-Password Protection Cross-Site Scripting (3.5.5.7)
CVE-2021-24837
CWE-79
High
WordPress Plugin Parsi Date Cross-Site Scripting (4.0.1)
-
CWE-79
High
WordPress Plugin Pardakht Delkhah Cross-Site Scripting (2.9.2)
CVE-2022-4307
CWE-79
High
Oracle Database Server CVE-2007-3858 Vulnerability (CVE-2007-3858)
CVE-2007-3858
-
High
Oracle Database Server Other Vulnerability (CVE-2007-3859)
CVE-2007-3859
-
High
Oracle Application Server Other Vulnerability (CVE-2007-3861)
CVE-2007-3861
-
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4033)
CVE-2007-4033
CWE-119
High
Oracle Application Server Other Vulnerability (CVE-2007-3862)
CVE-2007-3862
-
High
Oracle Application Server Other Vulnerability (CVE-2007-3863)
CVE-2007-3863
-
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.9.7)
CVE-2023-23488
CWE-89
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.6.6)
CVE-2021-25114
CWE-89
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Scripting (2.5.9.1)
-
CWE-79
High
Lighttpd Other Vulnerability (CVE-2007-3949)
CVE-2007-3949
-
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Scripting (2.6.5)
CVE-2021-24979
CWE-79
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Scripting (2.9.8)
CVE-2022-4830
CWE-79
High
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-3997)
CVE-2007-3997
CWE-264
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress PHP Object Injection (4.3.2)
CVE-2022-45083
CWE-915
High
WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Multiple Cross-Site Scripting Vulnerabilities (3.2.2)
CVE-2021-24955
CWE-79
High
PHP Resource Management Errors Vulnerability (CVE-2007-4660)
CVE-2007-4660
-
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4662)
CVE-2007-4662
CWE-119
High
Oracle Application Server CVE-2007-5517 Vulnerability (CVE-2007-5517)
CVE-2007-5517
-
High
Oracle Database Server CVE-2007-5505 Vulnerability (CVE-2007-5505)
CVE-2007-5505
-
High
WordPress Plugin Intuitive Custom Post Order Multiple Vulnerabilities (3.1.3)
CVE-2022-4386
CWE-862
High
WordPress Plugin Icon Widget Cross-Site Scripting (1.2.6)
CVE-2022-4763
CWE-79
High
WordPress Plugin Hueman Addons Cross-Site Scripting (2.3.3)
CVE-2022-4784
CWE-79
High
WordPress Plugin HashBar-WordPress Notification Bar Cross-Site Scripting (1.3.5)
CVE-2022-4650
CWE-79
High
WordPress Plugin GS Products Slider for WooCommerce Cross-Site Scripting (1.5.8)
CVE-2023-0492
CWE-79
High
WordPress Plugin GS Portfolio for Envato Cross-Site Scripting (1.3.8)
CVE-2023-0559
CWE-79
High
PHP Other Vulnerability (CVE-2007-5424)
CVE-2007-5424
-
High
WordPress Plugin GS Logo Slider-Ticker, Grid, List, Table & Filter Views Unspecified Vulnerability (3.3.8)
-
-
High
WordPress Plugin GS Logo Slider-Ticker, Grid, List, Table & Filter Views Cross-Site Scripting (3.3.7)
CVE-2022-4624
CWE-79
High
WordPress Plugin GS Insever Portfolio Cross-Site Scripting (1.4.4)
CVE-2023-0539
CWE-79
High
Oracle Database Server Resource Management Errors Vulnerability (CVE-2007-5506)
CVE-2007-5506
-
High
WordPress Plugin Justified Gallery Cross-Site Scripting (1.7.0)
CVE-2022-4651
CWE-79
High
WordPress Plugin GS Filterable Portfolio Cross-Site Scripting (1.6.0)
CVE-2023-0540
CWE-79
High
WordPress Plugin GS Books Showcase Cross-Site Scripting (1.3.0)
CVE-2023-0541
CWE-79
High
WordPress Plugin Greenshift-animation and page builder blocks Cross-Site Scripting (4.8.8)
CVE-2022-4653
CWE-79
High
WordPress Plugin Greenshift-animation and page builder blocks Cross-Site Scripting (4.9.9)
CVE-2023-0378
CWE-79
High
WordPress Plugin GPT AI Power Security Bypass (1.4.37)
CVE-2023-0405
CWE-862
High
Oracle Database Server CVE-2007-5512 Vulnerability (CVE-2007-5512)
CVE-2007-5512
-
High
WordPress Plugin GiveWP-Donation and Fundraising Platform SQL Injection (2.24.0)
CVE-2023-0224
CWE-89
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.23.2)
CVE-2022-4448
CWE-79
High
WordPress Plugin GigPress SQL Injection (2.3.28)
CVE-2023-0381
CWE-89
High
Oracle Application Server CVE-2007-5516 Vulnerability (CVE-2007-5516)
CVE-2007-5516
-
High
WordPress Plugin Judge.me Product Reviews for WooCommerce Cross-Site Scripting (1.3.20)
CVE-2023-0061
CWE-79
High
WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Cross-Site Scripting (1.4.9.8.9)
CVE-2022-4718
CWE-79
High
PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-4663)
CVE-2007-4663
CWE-22
High
WordPress Plugin Login Logout Menu Multiple Cross-Site Scripting Vulnerabilities (1.3.3)
CVE-2022-4625
CWE-79
High
WordPress Plugin Meteor Slides Cross-Site Scripting (1.5.6)
CVE-2022-4486
CWE-79
High
WordPress Plugin Members Import Cross-Site Scripting (1.4.2)
CVE-2022-4663
CWE-79
High
WordPress Plugin Meks Flexible Shortcodes Cross-Site Scripting (1.3.4)
CVE-2022-4562
CWE-79
High
WordPress Plugin MediaElement.js-HTML5 Video & Audio Player Cross-Site Scripting (4.2.8)
CVE-2022-4699
CWE-79
High
WordPress Plugin Media Library Assistant SQL Injection (3.05)
CVE-2023-0279
CWE-89
High
WordPress Plugin Media Library Assistant Information Disclosure (3.00)
CVE-2022-41618
CWE-200
High
WordPress Plugin Markup (JSON-LD) structured in schema.org Cross-Site Scripting (4.8.1)
CVE-2022-4666
CWE-79
High
WordPress Plugin Mapwiz SQL Injection (1.0.1)
CVE-2022-4546
CWE-89
High
PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-4825)
CVE-2007-4825
CWE-22
High
WordPress Plugin Login with phone number Cross-Site Scripting (1.4.1)
CVE-2023-23492
CWE-79
High
WordPress Plugin Login Logout Menu Cross-Site Scripting (1.3.3)
CVE-2022-4622
CWE-79
High
WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Cross-Site Scripting (1.4.9.5)
CVE-2021-25067
CWE-79
High
WordPress Plugin Login as User or Customer Privilege Escalation (3.2)
CVE-2022-4305
CWE-269
High
WordPress Plugin Location Weather Cross-Site Scripting (1.3.3)
CVE-2023-0360
CWE-79
High
WordPress Plugin Loan Comparison Multiple Cross-Site Scripting Vulnerabilities (1.5.2)
CVE-2023-0442
CWE-79
High
WordPress Plugin List Pages Shortcode Cross-Site Scripting (1.7.4)
CVE-2022-4757
CWE-79
High
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-4894)
CVE-2007-4894
CWE-138
High
WordPress Plugin Lightweight Accordion Cross-Site Scripting (1.5.14)
CVE-2023-0373
CWE-79
High
WordPress Plugin Lightbox Gallery Cross-Site Scripting (0.9.4)
CVE-2022-4682
CWE-79
High
WordPress Plugin LearnPress-WordPress LMS PHP Object Injection (4.1.7.1)
CVE-2022-3360
CWE-915
High
WordPress Plugin LearnPress-WordPress LMS Multiple Vulnerabilities (4.1.7.3.2)
CVE-2022-47615
CWE-89
High
Microsoft SQL Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-5090)
CVE-2007-5090
CWE-264
High
WordPress Plugin LearnPress-WordPress LMS Cross-Site Scripting (4.1.6.5)
-
CWE-79
High
WordPress Plugin Wholesale Market for WooCommerce Arbitrary File Download (1.0.6)
CVE-2022-4106
CWE-552
High
WordPress Plugin Wholesale Market Arbitrary File Download (2.2.0)
CVE-2022-4298
CWE-552
High
PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-5946)
CVE-2008-5946
CWE-138
High