🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Missing Update
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Missing Update
This page lists
23821 vulnerabilities
in this category.
Critical: 1574
High: 12741
Medium: 8710
Low: 792
Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Secure Copy Content Protection and Content Locking SQL Injection (2.6.6)
CVE-2021-24484
CWE-89
High
WordPress Plugin Translate WordPress with GTranslate Cross-Site Scripting (2.8.64)
CVE-2021-34630
CWE-79
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1116)
CVE-2012-1116
CWE-138
High
WordPress Plugin Form Builder-Create Responsive Contact Forms Cross-Site Scripting (1.9.8.4)
-
CWE-79
High
WordPress Plugin GNUCommerce Cross-Site Scripting (1.4.1)
-
CWE-79
High
WordPress Plugin Custom Text Selection Colors Cross-Site Scripting (1.0)
CVE-2021-24435
CWE-79
High
Oracle JRE CVE-2012-0503 Vulnerability (CVE-2012-0503)
CVE-2012-0503
-
High
Oracle JRE CVE-2012-0505 Vulnerability (CVE-2012-0505)
CVE-2012-0505
-
High
WordPress Plugin Custom Scrollbar Designer Cross-Site Scripting (1.0)
CVE-2021-24435
CWE-79
High
WordPress Plugin Custom Post View Generator Cross-Site Scripting (0.4.6)
CVE-2021-24605
CWE-79
High
WordPress Plugin Custom Post Type Relations Cross-Site Scripting (1.0)
CVE-2021-34654
CWE-79
High
WordPress Plugin Custom Menu Cross-Site Scripting (1.3.3)
CVE-2021-38321
CWE-79
High
Oracle Database Server CVE-2012-0519 Vulnerability (CVE-2012-0519)
CVE-2012-0519
-
High
WordPress Plugin Credova_Financial Information Disclosure (1.4.8)
CVE-2021-39342
CWE-200
High
WordPress Plugin Countdown and CountUp, WooCommerce Sales Timer Cross-Site Request Forgery (1.5.7)
CVE-2021-34636
CWE-352
High
WordPress Plugin Cookie Bar Cross-Site Scripting (1.8.8)
-
CWE-79
High
WordPress Plugin Daily Prayer Time Cross-Site Scripting (2021.08.07)
CVE-2021-24523
CWE-79
High
WordPress Plugin Comment and Review Spam Control for WooCommerce Security Bypass (1.4.2)
-
CWE-264
High
WordPress Plugin ClinicalWP Core Cross-Site Scripting (1.0.5)
CVE-2021-24435
CWE-79
High
WordPress Plugin Clean Login Cross-Site Scripting (1.12.6.3)
-
CWE-79
High
WordPress Plugin CBX Bookmark & Favorite Cross-Site Scripting (1.6.8)
-
CWE-79
High
WordPress Plugin Catchers Helpdesk and Ticket system for Support Cross-Site Scripting (2.6.7)
CVE-2021-24435
CWE-79
High
WordPress Plugin Calendar_plugin Cross-Site Scripting (1.0)
CVE-2021-34667
CWE-79
High
WordPress Plugin Business Hours Indicator Cross-Site Scripting (2.3.4)
CVE-2021-24593
CWE-79
High
MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-0553)
CVE-2012-0553
CWE-119
High
WordPress Plugin BulletProof Security Information Disclosure (5.1)
CVE-2021-39327
CWE-200
High
WordPress Plugin Bulk Add to Cart for WooCommerce Security Bypass (1.2.2)
-
CWE-264
High
WordPress Plugin Custom Website Data Cross-Site Scripting (2.2)
CVE-2021-38347
CWE-79
High
WordPress Plugin Disable Image Right Click Cross-Site Scripting (1.0)
CVE-2021-24435
CWE-79
High
WordPress Plugin BuddyPress Multiple Vulnerabilities (9.0.0)
-
CWE-200
High
WordPress Plugin Events Shortcodes For The Events Calendar Cross-Site Scripting (1.7.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Form Builder-Create Responsive Contact Forms Cross-Site Scripting (1.9.8.3)
CVE-2021-24513
CWE-79
High
WordPress Plugin FluentSMTP-WP Mail SMTP, Amazon SES, SendGrid, MailGun and Any SMTP Connector Cross-Site Scripting (2.0.0)
CVE-2021-24528
CWE-79
High
WordPress Plugin Floating Cart for WooCommerce Security Bypass (1.2.2)
-
CWE-264
High
WordPress Plugin Flight Search Widget and Blocks Cross-Site Scripting (1.1.0)
CVE-2021-24435
CWE-79
High
WordPress Plugin Fileviewer Cross-Site Request Forgery (2.2)
CVE-2021-24491
CWE-352
High
WordPress Plugin Feedify-Web Push Notifications Cross-Site Scripting (2.1.8)
CVE-2021-38352
CWE-79
High
WordPress Plugin Favicon by RealFaviconGenerator Cross-Site Scripting (1.3.20)
CVE-2021-24437
CWE-79
High
WordPress Plugin Facebook Page Feed Timeline Cross-Site Scripting (1.0)
CVE-2021-24435
CWE-79
High
WordPress Plugin Exit Popup Show Cross-Site Scripting (1.0)
CVE-2021-24435
CWE-79
High
WordPress Plugin Events Shortcodes For The Events Calendar Unspecified Vulnerability (1.7.2)
-
-
High
WordPress Plugin Events by Devllo Cross-Site Scripting (1.0.4.2)
-
CWE-79
High
WordPress Plugin DJ EmailPublish Cross-Site Scripting (1.7.2)
CVE-2021-38329
CWE-79
High
WordPress Plugin Event Espresso 4 Decaf-Event Registration Event Ticketing Cross-Site Request Forgery (4.10.11.decaf)
-
CWE-352
High
WordPress Plugin Email Encoder-Protect Email Addresses Cross-Site Scripting (2.1.1)
CVE-2021-24599
CWE-79
High
WordPress Plugin Email Artillery (MASS EMAIL) Multiple Vulnerabilities (4.1)
CVE-2021-24490
CWE-434
High
WordPress Plugin eID Easy Cross-Site Scripting (4.6)
CVE-2021-34650
CWE-79
High
WordPress Plugin Edit Comments XT Cross-Site Scripting (1.0)
CVE-2021-38336
CWE-79
High
WordPress Plugin Easy Social Icons Cross-Site Scripting (3.0.8)
CVE-2021-39322
CWE-79
High
WordPress Plugin Easy Social Icons Cross-Site Scripting (3.1.2)
-
CWE-79
High
WordPress Plugin Easy Justified Gallery Cross-Site Scripting (1.0.8)
CVE-2021-24435
CWE-79
High
WordPress Plugin Easy Google Map Cross-Site Scripting (1.1.4)
CVE-2021-24435
CWE-79
High
WordPress Plugin Easy Gallery Slideshow Cross-Site Scripting (1.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Dropdown and scrollable Text Cross-Site Scripting (2.0)
CVE-2021-38353
CWE-79
High
WordPress Plugin Bug Library Cross-Site Scripting (2.0.3)
CVE-2021-38355
CWE-79
High
Family Connections Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-0699)
CVE-2012-0699
CWE-352
High
WordPress Plugin VDZ VERIFICATION (Custom Meta Tags) Cross-Site Scripting (1.3.12)
-
CWE-79
High
WordPress Plugin WP SMS Cross-Site Scripting (5.4.12)
CVE-2021-24561
CWE-79
High
WordPress Plugin 4k Icons for Visual Composer-Free Cross-Site Scripting (1.0)
CVE-2021-24435
CWE-79
High
WordPress Plugin 3DPrint Lite Arbitrary File Upload (1.9.1.4)
-
CWE-434
High
WordPress Plugin 3D Cover Carousel Cross-Site Scripting (1.0)
CVE-2021-38318
CWE-79
High
WordPress Plugin 2Way VideoCalls and Random Chat-HTML5 Webcam Videochat Cross-Site Scripting (5.2.7)
CVE-2021-34656
CWE-79
High
WordPress Plugin Youtube Feeder Cross-Site Request Forgery (2.0.1)
CVE-2021-34633
CWE-352
High
WordPress Plugin YouTube Embed Cross-Site Scripting (5.2.1)
CVE-2021-24471
CWE-79
High
WordPress Plugin WPGraphQL Denial of Service (1.3.5)
CVE-2021-31157
CWE-400
High
WordPress Plugin WPFront Scroll Top Cross-Site Scripting (2.0.6.07225)
-
CWE-79
High
WordPress Plugin WPFront Scroll Top Cross-Site Scripting (2.0.5.07184)
CVE-2021-24564
CWE-79
High
MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-0882)
CVE-2012-0882
CWE-119
High
WordPress Plugin WP Simple Booking Calendar SQL Injection (2.0.6)
-
CWE-89
High
WordPress Plugin Add Product Tabs for WooCommerce Security Bypass (1.4.2)
-
CWE-264
High
WordPress Plugin WP Fusion Lite-Marketing Automation for WordPress Multiple Vulnerabilities (3.37.18)
CVE-2021-34661
CWE-352
High
Osclass Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-0973)
CVE-2012-0973
CWE-138
High
WordPress Plugin WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection-StopBadBots SQL Injection (6.59)
-
CWE-89
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Local File Inclusion (1.3.6.2)
CVE-2021-24566
CWE-98
High
WordPress Plugin Wonder Video Embed Cross-Site Scripting (1.7)
CVE-2021-24540
CWE-79
High
«
1
...
116
117
118
...
318
»