Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Import XML and RSS Feeds Arbitrary File Upload (2.1.5)
CVE-2024-31292
CWE-434
High
Internet Information Services Other Vulnerability (CVE-2000-0970)
CVE-2000-0970
-
High
MySQL Other Vulnerability (CVE-2000-0981)
CVE-2000-0981
-
High
WordPress Plugin Import Spreadsheets from Microsoft Excel Cross-Site Scripting (10.1.3)
CVE-2023-48289
CWE-79
High
WordPress Plugin Import Spreadsheets from Microsoft Excel Arbitrary File Upload (10.1.4)
CVE-2024-38734
CWE-434
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce SQL Injection (1.3.6)
CVE-2024-6457
CWE-89
High
WordPress Plugin Gutenberg Forms-WordPress Form Builder Arbitrary File Upload (2.2.9)
CVE-2024-6313
CWE-434
High
WordPress Plugin FormLift for Infusionsoft Web Forms SQL Injection (7.5.17)
CVE-2024-38773
CWE-89
High
WordPress Plugin Import XML and RSS Feeds Remote Code Execution (2.1.4)
CVE-2023-4521
CWE-94
High
WordPress Plugin Form Vibes-Database Manager for Forms SQL Injection (1.4.10)
CVE-2024-5325
CWE-89
High
WordPress Plugin Filter & Grids Local File Inclusion (2.8.32)
CVE-2024-6164
CWE-22
High
WordPress Plugin File Manager Advanced Shortcode Directory Traversal (2.4)
CVE-2023-7062
CWE-22
High
Internet Information Services Other Vulnerability (CVE-2000-1104)
CVE-2000-1104
-
High
WordPress Plugin File Manager Advanced Shortcode Arbitrary File Upload (2.5.3)
CVE-2023-7061
CWE-434
High
IBMHttpServer Other Vulnerability (CVE-2000-1168)
CVE-2000-1168
-
High
WordPress Plugin ExS Widgets Local File Inclusion (0.3.1)
CVE-2024-38715
CWE-22
High
WordPress Plugin Events Calendar for Google Local File Inclusion (2.1.0)
CVE-2024-38716
CWE-22
High
WordPress Plugin Event post Local File Inclusion (5.9.5)
CVE-2024-38735
CWE-22
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.25)
CVE-2024-6172
CWE-89
High
Internet Information Services Other Vulnerability (CVE-2000-0884)
CVE-2000-0884
-
High
WordPress Plugin Import XML and RSS Feeds Server-Side Request Forgery (2.0.2)
CVE-2020-24148
CWE-918
High
Zope Web Application Server Other Vulnerability (CVE-2000-1211)
CVE-2000-1211
-
High
WordPress Plugin Newspack Blocks Arbitrary File Upload (3.0.8)
CVE-2024-37424
CWE-434
High
WordPress Plugin Pixel Manager for WooCommerce-Track Google Analytics, Google Ads, TikTok and more Supply Chain Attack [Polyfill.io] (1.43.3)
-
CWE-1372
High
WordPress Plugin PayPlus Payment Gateway SQL Injection (7.0.7)
CVE-2024-37564
CWE-89
High
Internet Information Services Other Vulnerability (CVE-2000-0457)
CVE-2000-0457
-
High
Zope Web Application Server Other Vulnerability (CVE-2000-0483)
CVE-2000-0483
-
High
WordPress Plugin PayPlus Payment Gateway SQL Injection (6.6.8)
CVE-2024-6205
CWE-89
High
WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions SQL Injection (3.0.5)
CVE-2024-37486
CWE-89
High
WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions Insecure Direct Object Reference (3.0.4)
CVE-2024-37277
CWE-639
High
WordPress Plugin OSM-OpenStreetMap SQL Injection (6.0.2)
CVE-2024-3604
CWE-89
High
WordPress Plugin OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) Supply Chain Attack [Polyfill.io] (1.1.2)
-
CWE-1372
High
WordPress Plugin OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) Cross-Site Scripting (1.1.1)
CVE-2024-30450
CWE-79
High
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (4.14.7)
CVE-2024-6328
CWE-269
High
Mailman Other Vulnerability (CVE-2000-0861)
CVE-2000-0861
-
High
WordPress Plugin Modern Events Calendar Lite Arbitrary File Upload (7.11.0)
CVE-2024-5441
CWE-434
High
WordPress Plugin Modern Events Calendar Arbitrary File Upload (7.11.0)
CVE-2024-5441
CWE-434
High
Zope Web Application Server Other Vulnerability (CVE-2000-0725)
CVE-2000-0725
-
High
Internet Information Services Other Vulnerability (CVE-2000-0746)
CVE-2000-0746
-
High
WordPress Plugin Keydatas Arbitrary File Upload (2.5.2)
CVE-2024-6220
CWE-434
High
WordPress Plugin JSON API User Unspecified Vulnerability (3.9.6)
-
-
High
WordPress Plugin JSON API User Privilege Escalation (3.9.3)
CVE-2024-6624
CWE-269
High
WordPress Plugin JetWidgets for Elementor and WooCommerce Local File Inclusion (1.1.7)
CVE-2024-38772
CWE-22
High
WordPress Plugin IQ Testimonials Arbitrary File Upload (2.2.7)
CVE-2024-6314
CWE-434
High
WordPress Plugin InstaWP Connect-1-click WP Staging & Migration Security Bypass (0.1.0.44)
CVE-2024-6397
CWE-269
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.26)
CVE-2024-5703
CWE-862
High
WordPress Plugin DirectoryPress-Business Directory And Classified Ad Listing SQL Injection (3.6.10)
CVE-2024-38755
CWE-89
High
phpMyAdmin Other Vulnerability (CVE-2001-1060)
CVE-2001-1060
-
High
WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts (Premium) Security Bypass (6.3.2)
CVE-2024-3821
CWE-862
High
WordPress Plugin Advanced File Manager Information Disclosure (5.2.4)
CVE-2024-5598
CWE-200
High
WordPress Plugin Advanced File Manager Directory Traversal (5.1)
CVE-2023-3814
CWE-22
High
WordPress Plugin Advanced Classifieds & Directory Pro Local File Inclusion (3.1.3)
CVE-2024-37501
CWE-22
High
WordPress Plugin Advanced AJAX Page Loader Cross-Site Request Forgery (2.7.7)
CVE-2024-6310
CWE-352
High
Oracle Application Server Other Vulnerability (CVE-2001-0591)
CVE-2001-0591
-
High
WordPress Plugin Zoho Marketing Automation SQL Injection (1.2.7)
CVE-2024-37225
CWE-89
High
WordPress Plugin Youzify-BuddyPress Community, User Profile, Social Network & Membership for WordPress SQL Injection (1.2.5)
CVE-2024-4742
CWE-89
High
WordPress Plugin Wrapper Link Elementor Malicious Code (1.0.3)
CVE-2024-6297
CWE-506
High
WordPress Plugin wpForo Forum SQL Injection (2.3.3)
CVE-2024-3200
CWE-89
High
WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts (Premium) SQL Injection (6.3.1)
CVE-2024-3820
CWE-89
High
WordPress Plugin WP TripAdvisor Review Slider SQL Injection (12.6)
CVE-2024-35630
CWE-89
High
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress Arbitrary File Creation (1.1.5)
CVE-2024-6467
CWE-73
High
Oracle Database Server Other Vulnerability (CVE-2001-0833)
CVE-2001-0833
-
High
WordPress Plugin WP TripAdvisor Review Slider Cross-Site Scripting (11.8)
CVE-2023-6037
CWE-79
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Server-Side Request Forgery (3.4.3)
CVE-2024-4469
CWE-918
High
Internet Information Services Other Vulnerability (CVE-2001-0902)
CVE-2001-0902
-
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Information Disclosure (3.4.3)
CVE-2024-3682
CWE-200
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Arbitrary File Upload (3.4.3)
CVE-2024-3412
CWE-434
High
WordPress Plugin WP Server Health Stats Malicious Code (1.7.6)
CVE-2024-6297
CWE-506
High
WordPress Plugin WP-Recall-Registration, Profile, Commerce & More SQL Injection (16.26.5)
CVE-2024-32709
CWE-89
High
Oracle Database Server Other Vulnerability (CVE-2001-0943)
CVE-2001-0943
-
High
WordPress Plugin WP-Recall-Registration, Profile, Commerce & More Security Bypass (16.26.6)
CVE-2024-1175
CWE-862
High
Microsoft SQL Server Other Vulnerability (CVE-2001-0542)
CVE-2001-0542
-
High
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress Security Bypass (1.1.5)
CVE-2024-6660
CWE-863
High
WordPress Plugin Digital River Global Commerce Supply Chain Attack [Polyfill.io] (2.0.2)
-
CWE-1372
High
WordPress Plugin Brizy-Page Builder Arbitrary File Upload (2.4.44)
CVE-2024-3242
CWE-434
High