Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Joy Of Text Lite-SMS messaging for WordPress SQL Injection (2.3.0)
CVE-2022-4099
CWE-89
High
WordPress Plugin Insert Pages Cross-Site Scripting (3.7.4)
CVE-2022-4483
CWE-79
High
WordPress Plugin Image Optimizer, Resizer and CDN-Sirv Cross-Site Scripting (6.8.0)
CVE-2022-4119
CWE-79
High
WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Cross-Site Scripting (9.8.4)
CVE-2022-4207
CWE-79
High
WordPress Improper Authentication Vulnerability (CVE-2008-1930)
CVE-2008-1930
CWE-287
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-1935)
CVE-2008-1935
CWE-138
High
WordPress Plugin All-in-One Addons for Elementor-WidgetKit Cross-Site Scripting (2.4.3)
CVE-2022-4256
CWE-79
High
WordPress Plugin White Label CMS PHP Object Injection (2.4)
CVE-2022-4302
CWE-915
High
WordPress Plugin Follow Me Cross-Site Request Forgery (3.1.1)
CVE-2022-3240
CWE-352
High
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3223)
CVE-2008-3223
CWE-138
High
MyBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3071)
CVE-2008-3071
CWE-22
High
Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2008-3142)
CVE-2008-3142
CWE-120
High
Python Integer Overflow or Wraparound Vulnerability (CVE-2008-3143)
CVE-2008-3143
CWE-190
High
WordPress Plugin Seed Social Cross-Site Scripting (2.0.3)
CVE-2022-3836
CWE-79
High
WordPress Plugin Salon Booking System Multiple Information Disclosure Vulnerabilities (7.6.2)
CVE-2022-0920
CWE-200
High
WordPress Plugin Salon Booking System Cross-Site Scripting (7.9.3)
CVE-2022-43487
CWE-79
High
WordPress Plugin Restaurant Menu-Food Ordering System-Table Reservation Security Bypass (2.3.0)
CVE-2022-2696
CWE-862
High
WordPress Plugin Restaurant Menu-Food Ordering System-Table Reservation Cross-Site Request Forgery (2.3.1)
CVE-2022-3776
CWE-352
High
WordPress Plugin PostmagThemes Demo Import Arbitrary File Upload (1.0.7)
CVE-2022-1540
CWE-434
High
WordPress Plugin Plug your WooCommerce into the largest catalog of customized print products from Helloprint Cross-Site Scripting (1.4.6)
CVE-2022-3908
CWE-79
High
WordPress Plugin Photospace Gallery Cross-Site Scripting (2.3.5)
CVE-2022-3991
CWE-79
High
WordPress Plugin Simple Video Embedder Cross-Site Scripting (2.2)
CVE-2022-44590
CWE-79
High
Joomla Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3227)
CVE-2008-3227
CWE-59
High
Joomla Configuration Vulnerability (CVE-2008-3228)
CVE-2008-3228
-
High
WordPress Plugin Permalink Manager Lite Cross-Site Scripting (2.2.14)
CVE-2022-0201
CWE-79
High
WordPress Plugin Permalink Manager Lite Cross-Site Request Forgery (2.2.19.2)
-
CWE-352
High
WordPress Plugin Permalink Manager Lite Cross-Site Request Forgery (2.2.20.1)
CVE-2022-4021
CWE-352
High
WordPress Plugin Log HTTP Requests Cross-Site Scripting (1.3.1)
CVE-2022-3402
CWE-79
High
WordPress Plugin ImageMagick Engine Cross-Site Request Forgery (1.7.4)
CVE-2022-2441
CWE-352
High
WordPress Plugin Form Vibes-Database Manager for Forms Unspecified Vulnerability (1.4.2)
-
-
High
XOOPS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3296)
CVE-2008-3296
CWE-22
High
WordPress Plugin Form Vibes-Database Manager for Forms SQL Injection (1.4.5)
CVE-2022-3764
CWE-89
High
MyBB CVE-2008-3070 Vulnerability (CVE-2008-3070)
CVE-2008-3070
-
High
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-2999)
CVE-2008-2999
CWE-138
High
WordPress Plugin White Label CMS Cross-Site Scripting (2.2.8)
CVE-2022-0422
CWE-79
High
WordPress Plugin WP Affiliate Platform Multiple Vulnerabilities (6.3.9)
CVE-2022-3898
CWE-352
High
WordPress Plugin Team Members Cross-Site Scripting (5.1.0)
CVE-2022-1568
CWE-79
High
WordPress Plugin Team Members Cross-Site Scripting (5.2.0)
CVE-2022-3936
CWE-79
High
WordPress Plugin iubenda-All-in-one Compliance for GDPR/CCPA Cookie Consent + more Privilege Escalation (3.3.2)
CVE-2022-3911
CWE-269
High
WordPress Plugin Custom Field Template PHP Object Injection (2.5.7)
CVE-2022-4324
CWE-915
High
WordPress Plugin WPUpper Share Buttons Cross-Site Scripting (3.42)
CVE-2022-3838
CWE-79
High
WordPress Plugin WP Page Builder Cross-Site Scripting (1.2.6)
CVE-2022-40963
CWE-79
High
WordPress Plugin WP Page Builder Cross-Site Scripting (1.2.8)
CVE-2022-3830
CWE-79
High
WordPress Plugin WP OAuth Server (OAuth Authentication) Cross-Site Scripting (4.2.1)
CVE-2022-3892
CWE-79
High
Ruby Resource Management Errors Vulnerability (CVE-2008-2664)
CVE-2008-2664
-
High
WordPress Plugin WP CSV Exporter SQL Injection (1.3.6)
CVE-2022-3249
CWE-89
High
WordPress Plugin Wordpress Countdown Widget Cross-Site Scripting (3.1.9.2)
CVE-2022-2944
CWE-79
High
WordPress Plugin SVG Support Cross-Site Scripting (2.5.1)
CVE-2022-4022
CWE-79
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.3.7.2)
CVE-2021-25043
CWE-79
High
Ruby Numeric Errors Vulnerability (CVE-2008-2725)
CVE-2008-2725
-
High
Ruby Numeric Errors Vulnerability (CVE-2008-2726)
CVE-2008-2726
-
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.3.7)
CVE-2021-24938
CWE-79
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.3.7.4)
CVE-2022-0234
CWE-79
High
WordPress Plugin Web Stories Server-Side Request Forgery (1.24.0)
CVE-2022-3708
CWE-918
High
WordPress Plugin VR Calendar Cross-Site Request Forgery (2.3.3)
CVE-2022-3852
CWE-352
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Vulnerabilities (2.5.0)
CVE-2022-3384
CWE-94
High
WordPress Plugin Uji Countdown Cross-Site Scripting (2.2)
CVE-2022-3837
CWE-79
High
WordPress Plugin Theme Demo Import Arbitrary File Upload (1.1.0)
CVE-2022-1538
CWE-434
High
WordPress Plugin TeraWallet-For WooCommerce Insecure Direct Object Reference (1.4.3)
CVE-2022-3995
CWE-639
High
WordPress Plugin Simple Download Monitor Multiple Cross-Site Scripting Vulnerabilities (3.9.4)
CVE-2021-24697
CWE-79
High
WordPress Plugin Simple Download Monitor Cross-Site Scripting (3.9.10)
CVE-2021-24694
CWE-79
High
WordPress Plugin Portfolio for Elementor, Image Gallery & Post Grid-PowerFolio Unspecified Vulnerability (2.3.1)
-
-
High
WordPress Plugin RentPress Cross-Site Scripting (6.6.4)
CVE-2021-38323
CWE-79
High
WordPress Plugin SEO-Dashboard by gutewebsites.de Cross-Site Scripting (1.2.5)
CVE-2021-24435
CWE-79
High
WordPress Plugin Sell Media Cross-Site Request Forgery (2.5.5)
-
CWE-352
High
WordPress Plugin Securimage-WP-Fixed Cross-Site Scripting (3.5.4)
CVE-2021-34640
CWE-79
High
WordPress Plugin Seatgeek Affiliate Tickets Cross-Site Scripting (1.0.2)
CVE-2021-24435
CWE-79
High
WordPress Plugin Scribble Maps Cross-Site Scripting (1.2)
CVE-2021-34651
CWE-79
High
WordPress Plugin Scout bazar Cross-Site Scripting (1.3.3)
CVE-2021-34643
CWE-79
High
WordPress Plugin Rucy Cross-Site Request Forgery (0.4.4)
-
CWE-352
High
WordPress Plugin RSVPmaker Excel Cross-Site Scripting (1.1)
CVE-2021-38337
CWE-79
High
WordPress Plugin Request Quote via Whatsapp for Woocommerce Cross-Site Scripting (1.0.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Request For Quote Cross-Site Request Forgery (1.2)
-
CWE-352
High
Ruby Improper Input Validation Vulnerability (CVE-2011-4815)
CVE-2011-4815
CWE-20
High
WordPress Plugin Share, Print and PDF Products for WooCommerce Security Bypass (2.7.2)
-
CWE-264
High