🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Missing Update
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Missing Update
This page lists
23821 vulnerabilities
in this category.
Critical: 1574
High: 12741
Medium: 8710
Low: 792
Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin File Manager Advanced Shortcode Directory Traversal (2.4)
CVE-2023-7062
CWE-22
High
WordPress Plugin AWSM Team-Team Showcase Local File Inclusion (1.3.1)
CVE-2024-37454
CWE-22
High
WordPress Plugin Auto Featured Image Arbitrary File Upload (1.2)
CVE-2024-6054
CWE-434
High
MySQL Other Vulnerability (CVE-2001-1453)
CVE-2001-1453
-
High
WordPress Plugin WooCommerce Cross-Site Scripting (8.9.2)
CVE-2024-37297
CWE-79
High
Oracle Database Server Other Vulnerability (CVE-2001-0943)
CVE-2001-0943
-
High
WordPress Plugin WP-Recall-Registration, Profile, Commerce & More Security Bypass (16.26.6)
CVE-2024-1175
CWE-862
High
phpMyAdmin Other Vulnerability (CVE-2001-1060)
CVE-2001-1060
-
High
WordPress Plugin WP Logs Book Cross-Site Scripting (1.0.1)
CVE-2024-4477
CWE-79
High
Mailman Other Vulnerability (CVE-2001-1132)
CVE-2001-1132
-
High
WordPress Plugin WP Hotel Booking SQL Injection (2.1.0)
CVE-2024-3605
CWE-89
High
WordPress Plugin Wordpress Picture/Portfolio/Media Gallery Server-Side Request Forgery (3.0.1)
CVE-2024-5021
CWE-918
High
Oracle Application Server Other Vulnerability (CVE-2001-1216)
CVE-2001-1216
-
High
WordPress Plugin Woocommerce-Recent Purchases Local File Inclusion (1.0.1)
CVE-2024-35634
CWE-22
High
Zope Web Application Server Other Vulnerability (CVE-2001-1227)
CVE-2001-1227
-
High
PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2001-1246)
CVE-2001-1246
CWE-707
High
WordPress Plugin WP Server Health Stats Malicious Code (1.7.6)
CVE-2024-6297
CWE-506
High
WordPress Plugin WishList Member X SQL Injection (3.25.1)
CVE-2024-37112
CWE-89
High
WordPress Plugin WishList Member X Remote Code Execution (3.25.1)
CVE-2024-37109
CWE-94
High
MySQL Other Vulnerability (CVE-2001-1274)
CVE-2001-1274
-
High
MySQL Other Vulnerability (CVE-2001-1275)
CVE-2001-1275
-
High
Zope Web Application Server Other Vulnerability (CVE-2001-1278)
CVE-2001-1278
-
High
WordPress Plugin Web Directory Free SQL Injection (1.6.9)
CVE-2024-3552
CWE-89
High
Oracle Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2001-1371)
CVE-2001-1371
CWE-264
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress SQL Injection (3.11.1)
CVE-2024-35736
CWE-89
High
WordPress Plugin Visual Website Collaboration, Feedback & Project Management-Atarim Cross-Site Scripting (3.30)
CVE-2024-2793
CWE-79
High
Apache HTTP Server Other Vulnerability (CVE-2001-1449)
CVE-2001-1449
-
High
WordPress Plugin WP-Recall-Registration, Profile, Commerce & More SQL Injection (16.26.5)
CVE-2024-32709
CWE-89
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Arbitrary File Upload (3.4.3)
CVE-2024-3412
CWE-434
High
Oracle Application Server Other Vulnerability (CVE-2001-0419)
CVE-2001-0419
-
High
WordPress Plugin Advanced AJAX Page Loader Cross-Site Request Forgery (2.7.7)
CVE-2024-6310
CWE-352
High
phpMyAdmin Other Vulnerability (CVE-2001-0478)
CVE-2001-0478
-
High
Internet Information Services Other Vulnerability (CVE-2001-0506)
CVE-2001-0506
-
High
Internet Information Services Other Vulnerability (CVE-2001-0507)
CVE-2001-0507
-
High
WordPress Plugin Attachment File Icons (AF Icons) Cross-Site Request Forgery (1.3)
CVE-2024-6309
CWE-352
High
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress Security Bypass (1.1.5)
CVE-2024-6660
CWE-863
High
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress Arbitrary File Creation (1.1.5)
CVE-2024-6467
CWE-73
High
Microsoft SQL Server Other Vulnerability (CVE-2001-0542)
CVE-2001-0542
-
High
WordPress Plugin Advanced File Manager Information Disclosure (5.2.4)
CVE-2024-5598
CWE-200
High
WordPress Plugin Advanced File Manager Directory Traversal (5.1)
CVE-2023-3814
CWE-22
High
WordPress Plugin Advanced Classifieds & Directory Pro Local File Inclusion (3.1.3)
CVE-2024-37501
CWE-22
High
Oracle Application Server Other Vulnerability (CVE-2001-0591)
CVE-2001-0591
-
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Information Disclosure (3.4.3)
CVE-2024-3682
CWE-200
High
WordPress Plugin Zoho Marketing Automation SQL Injection (1.2.7)
CVE-2024-37225
CWE-89
High
WordPress Plugin Youzify-BuddyPress Community, User Profile, Social Network & Membership for WordPress SQL Injection (1.2.5)
CVE-2024-4742
CWE-89
High
WordPress Plugin Wrapper Link Elementor Malicious Code (1.0.3)
CVE-2024-6297
CWE-506
High
WordPress Plugin wpForo Forum SQL Injection (2.3.3)
CVE-2024-3200
CWE-89
High
WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts (Premium) SQL Injection (6.3.1)
CVE-2024-3820
CWE-89
High
WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts (Premium) Security Bypass (6.3.2)
CVE-2024-3821
CWE-862
High
WordPress Plugin WP TripAdvisor Review Slider SQL Injection (12.6)
CVE-2024-35630
CWE-89
High
Oracle Database Server Other Vulnerability (CVE-2001-0833)
CVE-2001-0833
-
High
WordPress Plugin WP TripAdvisor Review Slider Cross-Site Scripting (11.8)
CVE-2023-6037
CWE-79
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Server-Side Request Forgery (3.4.3)
CVE-2024-4469
CWE-918
High
Internet Information Services Other Vulnerability (CVE-2001-0902)
CVE-2001-0902
-
High
Joomla! Core 3.x.x Arbitrary File Upload (3.0.0 - 3.1.4)
CVE-2013-5576
CWE-434
High
Joomla! Core 3.4.x Cross-Site Scripting (3.4.0 - 3.4.3)
CVE-2015-6939
CWE-79
High
WordPress Plugin MW WP Form Cross-Site Scripting (5.0.6)
CVE-2024-24804
CWE-79
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.33)
CVE-2014-9016
CWE-400
High
Drupal Core 7.x Information Disclosure (7.0 - 7.26)
CVE-2014-2983
CWE-200
High
Drupal Core 7.x Multiple Security Bypass Vulnerabilities (7.0 - 7.25)
CVE-2014-1476
CWE-287
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.15)
CVE-2012-4554
CWE-538
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.23)
CVE-2013-6389
CWE-601
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.34)
CVE-2015-2750
CWE-601
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.28)
CVE-2014-5022
CWE-400
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.12)
CVE-2012-2153
CWE-601
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.17)
CVE-2012-5653
CWE-264
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.37)
CVE-2015-3234
CWE-601
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.10)
CVE-2012-0827
CWE-352
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.38)
CVE-2015-6665
CWE-352
High
Drupal Core 7.x Denial of Service (7.0 - 7.19)
CVE-2013-0316
CWE-400
High
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.18)
CVE-2013-0246
CWE-264
High
Drupal Core 7.x Multiple Vulnerabilities (7.0)
-
CWE-264
High
Drupal Core 7.x Open Redirect (7.0 - 7.40)
CVE-2015-7943
CWE-601
High
Drupal Core 7.x Security Bypass (7.0 - 7.4)
CVE-2011-2726
CWE-264
High
Drupal Core 7.x Security Bypass (7.0 - 7.2)
CVE-2011-2687
CWE-264
High
«
1
...
128
129
130
...
318
»