Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23409 vulnerabilities in this category.

Critical: 1513 High: 12591 Medium: 8518 Low: 783 Information: 4
Vulnerability Name
CVE
CWE
Severity
Drupal Core 9.4.x Remote Code Execution (9.4.0 - 9.4.2)
CVE-2022-25277
CWE-434
High
Drupal Core 9.4.x Security Bypass (9.4.0 - 9.4.2)
CVE-2022-25275
CWE-264
High
Drupal Core 9.2.x Cross-Site Scripting (9.2.0 - 9.2.3)
-
CWE-79
High
Drupal Core 9.2.x Cross-Site Request Forgery (9.2.0 - 9.2.5)
CVE-2020-13674
CWE-352
High
Drupal Core 9.0.x Remote Code Execution (9.0.0 - 9.0.8)
CVE-2020-28949
CWE-434
High
Drupal Core 8.9.x Directory Traversal (8.9.0 - 8.9.16)
CVE-2021-32610
CWE-22
High
Drupal Core 9.1.x Arbitrary File Overwrite (9.1.0 - 9.1.2)
CVE-2020-36193
CWE-73
High
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.6)
CVE-2020-13672
CWE-79
High
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.8)
CVE-2021-33829
CWE-79
High
Drupal Core 7.x Directory Traversal (7.0 - 7.81)
CVE-2021-32610
CWE-22
High
Drupal Core 7.x Multiple Cross-Site Scripting Vulnerabilities (7.0 - 7.85)
CVE-2021-41184
CWE-79
High
Drupal Core 7.x Security Bypass (7.0 - 7.90)
CVE-2022-25275
CWE-264
High
Drupal Core 7.x Security Bypass (7.0 - 7.87)
CVE-2022-25271
CWE-20
High
Drupal Core 8.9.x Cross-Site Request Forgery (8.9.0 - 8.9.18)
CVE-2020-13674
CWE-352
High
Drupal Core 8.9.x Cross-Site Scripting (8.9.0 - 8.9.19)
-
CWE-79
High
Drupal Core 8.9.x Cross-Site Scripting (8.9.0 - 8.9.17)
-
CWE-79
High
Drupal Core 8.9.x Multiple Security Bypass Vulnerabilities (8.9.0 - 8.9.18)
CVE-2020-13677
CWE-284
High
Drupal Core 9.1.x Multiple Security Bypass Vulnerabilities (9.1.0 - 9.1.12)
CVE-2020-13677
CWE-284
High
Drupal Core 8.x.x Cross-Site Request Forgery (8.0.0 - 8.8.12)
CVE-2020-13674
CWE-352
High
Drupal Core 8.x.x Directory Traversal (8.0.0 - 8.8.12)
CVE-2021-32610
CWE-22
High
Drupal Core 8.x.x Multiple Security Bypass Vulnerabilities (8.0.0 - 8.8.12)
CVE-2020-13677
CWE-284
High
Drupal Core 9.0.x Cross-Site Request Forgery (9.0.0 - 9.0.14)
CVE-2020-13674
CWE-352
High
Drupal Core 9.0.x Cross-Site Scripting (9.0.0 - 9.0.14)
-
CWE-79
High
Drupal Core 9.0.x Directory Traversal (9.0.0 - 9.0.14)
CVE-2021-32610
CWE-22
High
Drupal Core 9.0.x Multiple Security Bypass Vulnerabilities (9.0.0 - 9.0.14)
CVE-2020-13677
CWE-284
High
Drupal Core 9.1.x Cross-Site Request Forgery (9.1.0 - 9.1.12)
CVE-2020-13674
CWE-352
High
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.13)
-
CWE-79
High
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.11)
-
CWE-79
High
Drupal Core 9.1.x Directory Traversal (9.1.0 - 9.1.10)
CVE-2021-32610
CWE-22
High
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Cross-Site Scripting (4.2.7)
CVE-2024-2506
CWE-79
High
MySQL Other Vulnerability (CVE-2002-1374)
CVE-2002-1374
-
High
WordPress Plugin ShortPixel Adaptive Images-WebP, AVIF, CDN, Image Optimization Cross-Site Scripting (3.6.2)
CVE-2023-0334
CWE-79
High
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2006-4476)
CVE-2006-4476
CWE-264
High
WordPress Plugin TeraWallet-For WooCommerce Multiple Cross-Site Request Forgery Vulnerabilities (1.3.24)
CVE-2022-40198
CWE-352
High
WordPress Plugin Tapfiliate Cross-Site Scripting (3.0.12)
CVE-2023-25789
CWE-79
High
WordPress Plugin Stock market charts from finviz Cross-Site Scripting (1.0)
CVE-2023-23809
CWE-79
High
Joomla CVE-2006-4469 Vulnerability (CVE-2006-4469)
CVE-2006-4469
-
High
Joomla CVE-2006-4470 Vulnerability (CVE-2006-4470)
CVE-2006-4470
-
High
WordPress Plugin Sticky Ad Bar Cross-Site Scripting (1.3.1)
CVE-2023-25784
CWE-79
High
Joomla CVE-2006-4472 Vulnerability (CVE-2006-4472)
CVE-2006-4472
-
High
WordPress Plugin Sponsors Carousel Cross-Site Scripting (4.02)
CVE-2023-23808
CWE-79
High
WordPress Plugin Social Login WP Cross-Site Request Forgery (5.0.0.0)
CVE-2022-38063
CWE-352
High
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2006-4475)
CVE-2006-4475
CWE-264
High
PHP Other Vulnerability (CVE-2006-4481)
CVE-2006-4481
-
High
WordPress Plugin Theme Tweaker Cross-Site Request Forgery (5.20)
CVE-2023-23713
CWE-352
High
WordPress Plugin Sitemap Index Cross-Site Scripting (1.2.3)
CVE-2023-23816
CWE-79
High
WordPress Plugin Simple Yearly Archive Cross-Site Scripting (2.1.8)
CVE-2023-25484
CWE-79
High
e107 Other Vulnerability (CVE-2006-4548)
CVE-2006-4548
-
High
WordPress Plugin Simple PDF Viewer Cross-Site Scripting (1.9)
CVE-2023-23817
CWE-79
High
WordPress Plugin Shoppable Images Multiple Vulnerabilities (1.2.3)
CVE-2023-25698
CWE-862
High
WordPress Plugin Service Area Postcode Checker Cross-Site Scripting (2.0.8)
CVE-2023-25782
CWE-79
High
WordPress Plugin Scriptless Social Sharing Cross-Site Scripting (3.2.1)
CVE-2023-0377
CWE-79
High
WordPress Plugin ReviewX-Multi-criteria Rating & Reviews for WooCommerce SQL Injection (1.6.8)
CVE-2023-26325
CWE-89
High
WordPress Plugin ReviewX-Multi-criteria Rating & Reviews for WooCommerce Cross-Site Request Forgery (1.2.8)
-
CWE-352
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2006-4785)
CVE-2006-4785
CWE-138
High
PHP Other Vulnerability (CVE-2006-4433)
CVE-2006-4433
-
High
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Request Forgery (3.5.1.0)
CVE-2023-23726
CWE-352
High
WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login SQL Injection (5.0.2.1)
CVE-2022-0420
CWE-89
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Request Forgery (1.22.24)
-
CWE-352
High
WordPress Plugin Video Gallery-Best WordPress YouTube Gallery Multiple Vulnerabilities (1.7.6)
CVE-2023-25988
CWE-862
High
WordPress Plugin UsersWP-Front-end login form, User Registration, User Profile & Members Directory for WP Security Bypass (1.2.3)
CVE-2022-0442
CWE-639
High
WordPress Plugin UsersWP-Front-end login form, User Registration, User Profile & Members Directory for WP CSV Injection (1.2.3.9)
CVE-2022-47442
CWE-1236
High
Apache HTTP Server Numeric Errors Vulnerability (CVE-2006-3747)
CVE-2006-3747
-
High
WordPress Plugin Upload File Type Settings Cross-Site Scripting (1.1)
CVE-2023-25781
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Privilege Escalation (1.23.2)
-
CWE-269
High
WordPress Plugin UpdraftPlus WordPress Backup Multiple Vulnerabilities (1.16.58)
CVE-2021-24423
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.16.68)
CVE-2021-25089
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.22.8)
CVE-2022-0864
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.16.65)
CVE-2021-25022
CWE-79
High
WordPress Plugin Uncanny Toolkit for LearnDash Cross-Site Request Forgery (3.6.4.1)
CVE-2023-23714
CWE-352
High
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Request Forgery (3.4.9.9)
CVE-2022-4549
CWE-352
High
WordPress Plugin Uncanny Toolkit for LearnDash Cross-Site Request Forgery (3.6.3)
-
CWE-352
High
WordPress Plugin Ultimate WP Query Search Filter Cross-Site Scripting (1.0.10)
CVE-2023-23832
CWE-79
High
Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-4111)
CVE-2006-4111
CWE-94
High
Ruby on Rails CVE-2006-4112 Vulnerability (CVE-2006-4112)
CVE-2006-4112
-
High