Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23409 vulnerabilities in this category.

Critical: 1513 High: 12591 Medium: 8518 Low: 783 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin OG Tags Cross-Site Request Forgery (2.0.1)
CVE-2021-20831
CWE-352
High
WordPress Plugin JobBoardWP-Job Board Listings and Submissions Cross-Site Scripting (1.0.7)
CVE-2021-39329
CWE-79
High
WordPress Plugin OAuth Single Sign On-SSO (OAuth Client) Cross-Site Scripting (6.20.2)
-
CWE-79
High
WordPress Plugin MyBB Cross-Poster Cross-Site Scripting (1.0)
CVE-2021-39338
CWE-79
High
WordPress Plugin My Chatbot Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Modern Events Calendar Lite Cross-Site Scripting (5.22.2)
CVE-2021-24716
CWE-79
High
WordPress Plugin Modern Events Calendar Lite Cross-Site Scripting (5.22.1)
CVE-2021-24687
CWE-79
High
WordPress Plugin Meow Gallery (+ Gallery Block) SQL Injection (4.1.8)
CVE-2021-24465
CWE-89
High
WordPress Plugin Meow Gallery (+ Gallery Block) Security Bypass (4.1.9)
-
CWE-264
High
WordPress Plugin Login with Cognito Cross-Site Scripting (1.4.3)
-
CWE-79
High
WordPress Plugin Login with Azure (Azure SSO) Cross-Site Scripting (1.4.4)
-
CWE-79
High
WordPress Plugin KJM Admin Notices Cross-Site Scripting (2.0.1)
CVE-2021-39344
CWE-79
High
WordPress Plugin Booking Package-Appointment Booking Calendar System Cross-Site Scripting (1.5.10)
CVE-2021-20840
CWE-79
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2011-1938)
CVE-2011-1938
CWE-119
High
WordPress Plugin Timetable and Event Schedule by MotoPress Unspecified Vulnerability (2.4.3)
-
-
High
WordPress Plugin Timetable and Event Schedule by MotoPress Cross-Site Request Forgery (2.4.1)
CVE-2021-24584
CWE-352
High
WordPress Plugin WordPress Page Contact SQL Injection (1.0)
CVE-2021-24403
CWE-89
High
WordPress Plugin WooCommerce Zoho Integration-CRM, Books, Invoice, Inventory Cross-Site Scripting (1.2.3)
-
CWE-79
High
WordPress Plugin WooCommerce Salesforce Integration Cross-Site Scripting (1.5.8)
-
CWE-79
High
WordPress Plugin WooCommerce PDF Invoice Bulk Download Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin WooCommerce Affiliate-Coupon Affiliates Cross-Site Scripting (4.11.0.1)
-
CWE-79
High
WordPress Plugin WooCommerce Affiliate-Coupon Affiliates Cross-Site Request Forgery (4.11.3.3)
-
CWE-352
High
WordPress Plugin Unlimited PopUps SQL Injection (4.5.3)
CVE-2021-24631
CWE-89
High
phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-2506)
CVE-2011-2506
CWE-94
High
WordPress Plugin Timetable and Event Schedule by MotoPress Information Disclosure (2.3.19)
CVE-2021-24585
CWE-200
High
WordPress Plugin Timetable and Event Schedule by MotoPress Cross-Site Scripting (2.3.18)
CVE-2021-24724
CWE-79
High
WordPress Plugin The Sorter SQL Injection (1.0)
CVE-2021-24399
CWE-89
High
Oracle Database Server CVE-2011-2301 Vulnerability (CVE-2011-2301)
CVE-2011-2301
-
High
Plone CMS CVE-2011-2528 Vulnerability (CVE-2011-2528)
CVE-2011-2528
-
High
Zope Web Application Server CVE-2011-2528 Vulnerability (CVE-2011-2528)
CVE-2011-2528
-
High
WordPress Plugin TextMe SMS Cross-Site Scripting (1.8.8)
-
CWE-79
High
WordPress Plugin Stripe For WooCommerce Security Bypass (3.3.9)
CVE-2021-39347
CWE-264
High
WordPress Plugin SpiderCatalog SQL Injection (1.7.3)
CVE-2021-24625
CWE-89
High
WordPress Plugin Social Sharing-Sassy Social Share PHP Object Injection (3.3.23)
CVE-2021-39321
CWE-915
High
WordPress Plugin SMTP Mail SQL Injection (1.2.1)
-
CWE-89
High
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-2687)
CVE-2011-2687
CWE-264
High
WordPress Plugin SMTP Mail Cross-Site Scripting (1.1.14)
-
CWE-79
High
WordPress Plugin Simple Schools Staff Directory Arbitrary File Upload (1.1)
CVE-2021-24663
CWE-434
High
WordPress Plugin WordPress Popups for Marketing and Email Newsletters, Lead Generation and Conversions by OptinMonster Security Bypass (2.6.4)
CVE-2021-39341
CWE-264
High
WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Cross-Site Scripting (5.10.1)
CVE-2021-24525
CWE-79
High
WordPress Plugin Better Find and Replace Cross-Site Scripting (1.2.8)
CVE-2021-24676
CWE-79
High
WordPress Plugin WP iCommerce-the first interactive ecommerce for wordpress SQL Injection (1.1.1)
CVE-2021-24402
CWE-89
High
WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.3.15)
CVE-2021-24673
CWE-79
High
WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.3.16)
CVE-2021-24712
CWE-79
High
WordPress Plugin Age Gate Security Bypass (2.17.0)
-
CWE-264
High
WordPress Plugin Age Gate Cross-Site Scripting (2.16.3)
-
CWE-79
High
WordPress Plugin Affiliate Power-Sales Tracking for Affiliate Marketers Cross-Site Scripting (2.2.0)
-
CWE-79
High
WordPress Plugin Zoho CRM Lead Magnet Unspecified Vulnerability (1.7.2.9)
-
-
High
WordPress Plugin Zoho CRM Lead Magnet Cross-Site Scripting (1.7.2.8)
CVE-2021-33849
CWE-79
High
WordPress Plugin WP Video Lightbox Cross-Site Scripting (1.9.2)
CVE-2021-24665
CWE-79
High
WordPress Plugin WP Insightly for Contact Form 7 and Ninja Forms Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin WP Infusionsoft WooCommerce Cross-Site Scripting (1.0.8)
-
CWE-79
High
WordPress Plugin WP Gravity Forms Zoho CRM Add-on Cross-Site Scripting (1.1.5)
-
CWE-79
High
WordPress Plugin Wow Forms-create any form with custom style SQL Injection (3.1.3)
CVE-2021-24628
CWE-89
High
WordPress Plugin WP Gravity Forms Zendesk Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin WP Gravity Forms Insightly Cross-Site Scripting (1.0.6)
-
CWE-79
High
WordPress Plugin WP DSGVO Tools (GDPR) Cross-Site Scripting (3.1.23)
-
CWE-79
High
Oracle Database Server CVE-2011-2239 Vulnerability (CVE-2011-2239)
CVE-2011-2239
-
High
WordPress Plugin WP Domain Redirect SQL Injection (1.0)
CVE-2021-24401
CWE-89
High
WordPress Plugin WP-Board SQL Injection (1.1)
CVE-2021-24404
CWE-89
High
WordPress Plugin WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection-StopBadBots Unspecified Vulnerability (6.66)
-
-
High
WordPress Plugin WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection-StopBadBots Cross-Site Scripting (6.61)
-
CWE-79
High
WordPress Plugin WP Bannerize SQL Injection (4.0.2)
CVE-2021-39351
CWE-89
High
Oracle Database Server CVE-2011-2253 Vulnerability (CVE-2011-2253)
CVE-2011-2253
-
High
WordPress Plugin Starter Templates-Elementor, WordPress & Beaver Builder Templates Security Bypass (2.7.0)
CVE-2021-42360
CWE-264
High
WordPress Plugin Translate Multilingual sites-TranslatePress Cross-Site Scripting (2.0.8)
CVE-2021-24610
CWE-79
High
WordPress Plugin StreamCast-Radio Player for WordPress Cross-Site Scripting (2.1)
CVE-2021-24416
CWE-79
High
WordPress Plugin H5P CSS Editor Cross-Site Scripting (1.0)
CVE-2021-39318
CWE-79
High
WordPress Plugin Page Generator Cross-Site Scripting (1.5.8)
-
CWE-79
High
WordPress Plugin One User Avatar-User Profile Picture Unspecified Vulnerability (2.3.8)
-
-
High
WordPress Plugin One User Avatar-User Profile Picture Multiple Vulnerabilities (2.3.6)
CVE-2021-24675
CWE-352
High
WordPress Plugin myghpay WooCommerce Payment Gateway Cross-Site Scripting (3.0)
CVE-2021-39308
CWE-79
High
WordPress Plugin MainWP Child Reports SQL Injection (2.0.7)
CVE-2021-24754
CWE-89
High
WordPress Plugin Magic Post Voice Cross-Site Scripting (1.2)
CVE-2021-39315
CWE-79
High
WordPress Plugin link-list-manager Cross-Site Scripting (1.0)
CVE-2021-39311
CWE-79
High