Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress SQL Injection (3.6.3)
CVE-2021-24889
CWE-89
High
WordPress Plugin Booking.com Banner Creator Cross-Site Scripting (1.4.2)
CVE-2021-24646
CWE-79
High
WordPress Plugin Coming Soon, Under Construction & Maintenance Mode By Dazzler Cross-Site Scripting (1.6.6)
CVE-2021-24539
CWE-79
High
WordPress Plugin Check & Log Email SQL Injection (1.0.2)
CVE-2021-24774
CWE-89
High
WordPress Plugin Check & Log Email Cross-Site Scripting (1.0.3)
CVE-2021-24908
CWE-79
High
OpenSSL Improper Authentication Vulnerability (CVE-2010-4252)
CVE-2010-4252
CWE-287
High
WordPress Plugin Cardinity Payment Gateway for WooCommerce Cross-Site Scripting (3.0.6)
-
CWE-79
High
WordPress Plugin Booking.com Product Helper Unspecified Vulnerability (1.0.3)
-
-
High
Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4269)
CVE-2010-4269
CWE-138
High
WordPress Plugin Booking.com Product Helper Cross-Site Scripting (1.0.1)
CVE-2021-24645
CWE-79
High
WordPress Plugin Booking.com Banner Creator Unspecified Vulnerability (1.4.5)
-
-
High
CakePHP Improper Input Validation Vulnerability (CVE-2010-4335)
CVE-2010-4335
CWE-20
High
WordPress Plugin Better Messages-Live Chat for WordPress, BuddyPress, BuddyBoss, Ultimate Member Multiple Vulnerabilities (1.9.9.37)
CVE-2021-24809
CWE-352
High
WordPress Plugin Comments Disable-AccessPress includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Beautiful Stat Counter for WordPress-Everest Counter Lite includes Backdoor [Only if downloaded via the vendor website] (2.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Beautiful FAQ for WordPress-Everest FAQ Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.8)
CVE-2021-24867
CWE-912
High
WordPress Plugin Batch Cat Security Bypass (0.3)
CVE-2021-24788
CWE-264
High
WordPress Plugin Badge Designer Lite For WooCommerce includes Backdoor [Only if downloaded via the vendor website] (1.1.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin AutomatorWP-The most flexible and powerful no-code automation for WordPress Security Bypass (1.7.5)
CVE-2021-24717
CWE-863
High
WordPress Plugin AP Companion includes Backdoor [Only if downloaded via the vendor website] (1.0.6)
CVE-2021-24867
CWE-912
High
WordPress Plugin Allow REL= and HTML in Author Bios Cross-Site Scripting (.1)
-
CWE-79
High
WordPress Plugin Age Gate Unspecified Vulnerability (2.18.5)
-
-
High
WordPress Plugin Affiliates Manager SQL Injection (2.8.6)
CVE-2021-24844
CWE-89
High
WordPress Plugin Affiliates Manager Cross-Site Scripting (2.8.9)
CVE-2021-25078
CWE-79
High
WordPress Plugin Coming Soon, Under Construction & Maintenance Mode By Dazzler Unspecified Vulnerability (1.6.8)
-
-
High
WordPress Plugin Connections Business Directory Cross-Site Scripting (10.4.2)
CVE-2021-24794
CWE-79
High
WordPress Plugin Everest GPlaces Business Reviews includes Backdoor [Only if downloaded via the vendor website] (1.0.9)
CVE-2021-24867
CWE-912
High
WordPress Plugin Download Monitor Unspecified Vulnerability (4.4.6)
-
-
High
WordPress Plugin Events Made Easy SQL Injection (2.2.35)
CVE-2021-25030
CWE-89
High
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3714)
CVE-2010-3714
CWE-264
High
WordPress Plugin Events Made Easy Cross-Site Scripting (2.2.23)
CVE-2021-24813
CWE-79
High
WordPress Plugin Embed Swagger Cross-Site Scripting (1.0.0)
CVE-2022-0381
CWE-79
High
WordPress Plugin Effectively Add & Customize Free Icons For WordPress Menus-WP Menu Icons Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.8)
CVE-2021-24867
CWE-912
High
WordPress Plugin Easy PayPal Events Unspecified Vulnerability (1.1.6)
-
-
High
WordPress Plugin Easy PayPal Events Cross-Site Scripting (1.1.1)
-
CWE-79
High
WordPress Plugin Easy Media Download Cross-Site Scripting (1.1.6)
CVE-2021-24699
CWE-79
High
WordPress Plugin Easiest Contact Form for WordPress-AP Contact Form includes Backdoor [Only if downloaded via the vendor website] (1.0.6)
CVE-2021-24867
CWE-912
High
WordPress Plugin Duplicate Post SQL Injection (1.1.9)
CVE-2021-43408
CWE-89
High
WordPress Plugin Download Monitor SQL Injection (4.4.4)
CVE-2021-24786
CWE-89
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4166)
CVE-2010-4166
CWE-138
High
WordPress Plugin Discounts Manager for Products Cross-Site Scripting (3.4.4)
-
CWE-79
High
WordPress Plugin Custom Dashboard & Login Page-AGCA Cross-Site Scripting (6.9.1)
CVE-2021-36823
CWE-79
High
WordPress Plugin CTA for WordPress-Easy Side Tab includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
CVE-2021-24867
CWE-912
High
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2010-3864)
CVE-2010-3864
CWE-362
High
WordPress Plugin Crisp Live Chat Cross-Site Request Forgery (0.31)
CVE-2021-43353
CWE-352
High
WordPress Plugin Cool Tag Cloud Cross-Site Scripting (2.25)
CVE-2021-24682
CWE-79
High
WordPress Plugin Cookie Notification for WordPress-WP Cookie User Info includes Backdoor [Only if downloaded via the vendor website] (1.0.7)
CVE-2021-24867
CWE-912
High
WordPress Plugin Contact Form for WordPress-Ultimate Form Builder Lite includes Backdoor [Only if downloaded via the vendor website] (1.5.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin Connections Business Directory Unspecified Vulnerability (10.4.7)
-
-
High
WordPress Plugin Connections Business Directory CSV Injection (9.6)
CVE-2020-36503
CWE-1236
High
phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3055)
CVE-2010-3055
CWE-264
High
WordPress Plugin Permalink Manager Lite SQL Injection (2.2.12)
CVE-2021-24769
CWE-89
High
phpMyFAQ Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-4558)
CVE-2010-4558
CWE-94
High
WordPress Plugin Video Gallery-Vimeo and YouTube Gallery Cross-Site Scripting (1.1.4)
CVE-2021-24515
CWE-79
High
phpBB CVE-2010-1630 Vulnerability (CVE-2010-1630)
CVE-2010-1630
-
High
WordPress Plugin WCFM-Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible SQL Injection (6.5.11)
CVE-2021-24835
CWE-89
High
WordPress Plugin Waitlist Woocommerce (Back in stock notifier) Cross-Site Request Forgery (2.5.1)
CVE-2022-0215
CWE-352
High
WordPress Plugin Visual Form Builder Unspecified Vulnerability (3.0.5)
-
-
High
WordPress Plugin Visual Form Builder Cross-Site Scripting (3.0.3)
CVE-2021-24514
CWE-79
High
WordPress Plugin Visitor Traffic Real Time Statistics Unspecified Vulnerability (4.2)
-
-
High
WordPress Plugin Visitor Traffic Real Time Statistics SQL Injection (3.8)
CVE-2021-24829
CWE-89
High
WordPress Plugin Vision Interactive For WordPress Cross-Site Scripting (1.4.4)
-
CWE-79
High
WordPress Plugin Video Player for YouTube Cross-Site Scripting (1.3)
CVE-2021-24414
CWE-79
High
WordPress Plugin User Registration, Login & Landing Pages-LeadMagic Cross-Site Scripting (1.2.7)
CVE-2022-0232
CWE-79
High
WordPress Plugin WHMCS Bridge Cross-Site Scripting (6.2)
CVE-2021-4074
CWE-79
High
WordPress Plugin Ultimate Coming Soon, Maintenance Mode for WordPress-Everest Coming Soon Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin Two Way CHAT-Send or receive messages to your user Multiple Vulnerabilities (3.1.4)
-
CWE-352
High
WordPress Plugin Total Team Lite-Responsive Team Manager/Showcase for WordPress includes Backdoor [Only if downloaded via the vendor website] (1.1.1)
CVE-2021-24867
CWE-912
High
WordPress Plugin Total GDPR Compliance Lite-WordPress for GDPR Compatibility includes Backdoor [Only if downloaded via the vendor website] (1.0.4)
CVE-2021-24867
CWE-912
High
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1868)
CVE-2010-1868
CWE-94
High
WordPress Plugin to Manage/Design WordPress Blog-WP Blog Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin Themify Builder Cross-Site Scripting (5.3.1)
-
CWE-79
High
WordPress Plugin The Easiest WordPress Media Manager-WP Media Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.2)
CVE-2021-24867
CWE-912
High
WordPress Plugin Testimonial WordPress-AP Custom Testimonial Unspecified Vulnerability (1.4.7)
-
-
High
Serendipity Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1916)
CVE-2010-1916
CWE-264
High