Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Kadence WooCommerce Email Designer PHP Object Injection (1.5.6)
CVE-2022-3335
CWE-915
High
WordPress Plugin Retain Live Chat Cross-Site Scripting (0.1)
CVE-2022-3391
CWE-79
High
MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3967)
CVE-2008-3967
CWE-264
High
WordPress Plugin Post to CSV by BestWebSoft CSV Injection (1.4.0)
CVE-2022-3393
CWE-1236
High
WordPress Plugin Passster-Password Protection Weak Encoding (3.5.5.5.1)
CVE-2022-3206
CWE-326
High
WordPress Plugin miniOrange Discord Integration Security Bypass (2.1.5)
CVE-2022-3082
CWE-284
High
WordPress Plugin Manage Notification E-mails Cross-Site Request Forgery (1.8.2)
CVE-2022-34654
CWE-352
High
WordPress Plugin LBstopattack Cross-Site Request Forgery (1.1.2)
CVE-2022-3097
CWE-352
High
WordPress Plugin Kraken.io Image Optimizer Cross-Site Request Forgery (2.6.5)
CVE-2022-38454
CWE-352
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4094)
CVE-2008-4094
CWE-138
High
phpMyAdmin Improper Input Validation Vulnerability (CVE-2008-4096)
CVE-2008-4096
CWE-20
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Server-Side Request Forgery (6.5.2)
CVE-2022-1977
CWE-918
High
WordPress Plugin Search Logger-Know What Your Visitors Search SQL Injection (0.9)
CVE-2022-3131
CWE-89
High
Joomla Numeric Errors Vulnerability (CVE-2008-4102)
CVE-2008-4102
-
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Security Bypass (6.4.1)
-
CWE-862
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Multiple Vulnerabilities (6.5.7)
CVE-2022-3244
CWE-862
High
Joomla Improper Input Validation Vulnerability (CVE-2008-4105)
CVE-2008-4105
CWE-20
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Cross-Site Scripting (6.4.2)
CVE-2022-0360
CWE-79
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Arbitrary File Upload (6.4)
-
CWE-434
High
WordPress Plugin Helpful Security Bypass (4.5.14)
-
CWE-264
High
WordPress Plugin Helpful Information Disclosure (4.5.25)
CVE-2022-2834
CWE-200
High
WordPress Plugin Frontend File Manager Cross-Site Request Forgery (21.3)
CVE-2022-3126
CWE-352
High
WordPress Plugin Forym-Modern Discussion Forum for Wordpress-Forums Cross-Site Scripting (1.5.8)
-
CWE-79
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3965)
CVE-2008-3965
CWE-138
High
Ampache Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3929)
CVE-2008-3929
CWE-59
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder SQL Injection (1.15.5)
CVE-2022-3300
CWE-89
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2008-3658)
CVE-2008-3658
CWE-119
High
WordPress Plugin Comic Book Management System SQL Injection (2.1.0)
CVE-2022-3856
CWE-89
High
WordPress Plugin Clerk Security Bypass (3.8.3)
CVE-2022-3907
CWE-200
High
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.11.19)
CVE-2022-3922
CWE-79
High
WordPress Plugin BeCustom Cross-Site Request Forgery (1.0.5.2)
CVE-2022-3747
CWE-352
High
Coppermine Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-3481)
CVE-2008-3481
CWE-94
High
Coppermine Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3486)
CVE-2008-3486
CWE-22
High
WordPress Plugin Advanced WP Columns Cross-Site Scripting (2.0.6)
CVE-2022-3426
CWE-79
High
Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3655)
CVE-2008-3655
CWE-264
High
Ruby Resource Management Errors Vulnerability (CVE-2008-3656)
CVE-2008-3656
-
High
Ruby Improper Input Validation Vulnerability (CVE-2008-3657)
CVE-2008-3657
CWE-20
High
WordPress Plugin Advanced Import:One Click Import for WordPress or Theme Demo Data Cross-Site Request Forgery (1.3.7)
CVE-2022-3677
CWE-352
High
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk SQL Injection (5.185)
CVE-2022-3302
CWE-89
High
WordPress Plugin Add Comments Cross-Site Scripting (1.0.1)
CVE-2022-3909
CWE-79
High
WordPress Plugin 3DPrint Cross-Site Request Forgery (3.5.4.7)
CVE-2022-3899
CWE-352
High
WordPress Plugin WP Super Cache Cache Poisoning (1.8)
-
CWE-349
High
WordPress Plugin WP Humans.txt Cross-Site Scripting (1.0.6)
CVE-2022-3392
CWE-79
High
WordPress Plugin WP Custom Cursors Multiple Vulnerabilities (3.0)
CVE-2022-3151
CWE-352
High
WordPress Plugin WP ALL Export Pro Multiple Vulnerabilities (1.7.8)
CVE-2022-3395
CWE-94
High
WordPress Plugin We�re Open! Cross-Site Scripting (1.41)
CVE-2022-3139
CWE-79
High
WordPress Plugin Tabs-Responsive Tabs with WooCommerce Product Tab Extension Security Bypass (3.6.0)
CVE-2022-36375
CWE-863
High
WordPress Plugin Tabs-Responsive Tabs with WooCommerce Product Tab Extension Security Bypass (3.5.4)
-
CWE-862
High
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3747)
CVE-2008-3747
CWE-264
High
WordPress Plugin Tabs-Responsive Tabs with WooCommerce Product Tab Extension Cross-Site Scripting (3.7.1)
CVE-2022-40215
CWE-79
High
Ruby Resource Management Errors Vulnerability (CVE-2008-4310)
CVE-2008-4310
-
High
Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-4359)
CVE-2008-4359
CWE-200
High
WordPress Plugin Floating Chat Widget:Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button-Chaty Multiple Cross-Site Scripting Vulnerabilities (2.8.3)
CVE-2021-36846
CWE-79
High
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-5624)
CVE-2008-5624
CWE-264
High
WordPress Plugin WP Socializer-Simple & Easy Social Media Share Icons Cross-Site Scripting (7.2)
CVE-2022-2763
CWE-79
High
WordPress Plugin WP Server Health Stats Cross-Site Scripting (1.6.10)
CVE-2022-2887
CWE-79
High
WordPress Plugin WP Popup Builder-Popup Forms, Marketing PoPuP & Newsletter Multiple Vulnerabilities (1.2.8)
CVE-2022-2405
CWE-862
High
WordPress Plugin WP JS Cross-Site Scripting (2.0.6)
CVE-2022-1567
CWE-79
High
WordPress Plugin WP Hotel Booking PHP Object Injection (1.10.3)
CVE-2020-29047
CWE-915
High
WordPress Plugin WP Hotel Booking Cross-Site Request Forgery (1.10.5)
CVE-2021-36852
CWE-352
High
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Security Bypass (9.0)
CVE-2022-2939
CWE-264
High
WordPress Plugin WordPress Ping Optimizer Cross-Site Request Forgery (2.35.1.2.3)
CVE-2022-1591
CWE-352
High
Roundcube Resource Management Errors Vulnerability (CVE-2008-5620)
CVE-2008-5620
-
High
WordPress Plugin WordPress Infinite Scroll-Ajax Load More Directory Traversal (5.5.4)
-
CWE-22
High
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-5625)
CVE-2008-5625
CWE-264
High
WordPress Plugin WP Taxonomy Import Cross-Site Scripting (1.0.4)
CVE-2022-2669
CWE-79
High
WordPress Plugin WordLift-AI powered SEO-Schema Cross-Site Scripting (3.37.1)
CVE-2022-3069
CWE-79
High
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (7.6.0)
CVE-2022-3144
CWE-79
High
PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-5658)
CVE-2008-5658
CWE-22
High
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-5665)
CVE-2008-5665
CWE-138
High
Joomla Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-5671)
CVE-2008-5671
CWE-94
High
WordPress Plugin WBW Currency Switcher for WooCommerce Cross-Site Scripting (1.6.5)
CVE-2022-2575
CWE-79
High
WordPress Plugin Wbcom Designs-BuddyPress Group Reviews Security Bypass (2.8.3)
CVE-2022-2108
CWE-264
High
WordPress Improper Input Validation Vulnerability (CVE-2008-5695)
CVE-2008-5695
CWE-20
High
WordPress Plugin Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages Multiple Cross-Site Scripting Vulnerabilities (45.0)
CVE-2022-2430
CWE-79
High