Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Insert or Embed Articulate Content into WordPress Arbitrary File Upload (4.3000000023)
CVE-2024-0757
CWE-434
High
WordPress Plugin Image Optimizer, Resizer and CDN-Sirv Arbitrary File Upload (7.2.6)
CVE-2024-5853
CWE-434
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.24)
CVE-2024-1061
CWE-89
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.26)
CVE-2024-5522
CWE-89
High
Oracle Database Server Other Vulnerability (CVE-2002-1767)
CVE-2002-1767
-
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block Cross-Site Scripting (2.5.18)
CVE-2023-6485
CWE-79
High
WordPress Plugin Gallery-Image and Video Gallery with Thumbnails SQL Injection (2.0.3)
CVE-2024-35750
CWE-89
High
WordPress Plugin File Manager Pro Arbitrary File Upload (8.3.4)
CVE-2023-6846
CWE-434
High
MySQL Other Vulnerability (CVE-2002-1809)
CVE-2002-1809
-
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.22)
CVE-2024-4845
CWE-89
High
Apache HTTP Server Improper Locking Vulnerability (CVE-2002-1850)
CVE-2002-1850
CWE-667
High
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2002-2391)
CVE-2002-2391
CWE-138
High
WordPress Plugin BLAZE Retail Widget Malicious Code (2.5.2)
CVE-2024-6297
CWE-506
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Cross-Site Scripting (5.3.2.0)
CVE-2024-33947
CWE-79
High
PostgreSQL Other Vulnerability (CVE-2003-0901)
CVE-2003-0901
-
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership SQL Injection (2.8.2)
CVE-2024-1071
CWE-89
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.8.3)
CVE-2024-2123
CWE-79
High
Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2003-0542)
CVE-2003-0542
CWE-119
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.8.4)
CVE-2024-2765
CWE-79
High
WordPress Plugin Tutor LMS Elementor Addons Cross-Site Scripting (2.1.3)
CVE-2024-29913
CWE-79
High
WordPress Plugin Tutor LMS-eLearning and online course solution SQL Injection (2.7.0)
CVE-2024-4318
CWE-89
High
WordPress Plugin Tutor LMS-eLearning and online course solution SQL Injection (2.6.1)
CVE-2024-1751
CWE-89
High
WordPress Plugin Tutor LMS-eLearning and online course solution Security Bypass (2.6.2)
CVE-2024-3553
CWE-862
High
PHP Other Vulnerability (CVE-2003-0863)
CVE-2003-0863
-
High
WordPress Plugin Tutor LMS-eLearning and online course solution Security Bypass (2.7.0)
CVE-2024-4223
CWE-862
High
WordPress Plugin Tutor LMS-eLearning and online course solution Security Bypass (2.6.1)
CVE-2024-1502
CWE-862
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Security Bypass (3.10.15)
CVE-2024-3750
CWE-862
High
Apache HTTP Server Other Vulnerability (CVE-2003-0987)
CVE-2003-0987
-
High
WordPress Plugin Tutor LMS-eLearning and online course solution Insecure Direct Object Reference (2.7.0)
CVE-2024-4279
CWE-639
High
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (2.6.2)
CVE-2024-3994
CWE-79
High
Apache HTTP Server Other Vulnerability (CVE-2003-0993)
CVE-2003-0993
-
High
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Request Forgery (2.6.1)
CVE-2024-1503
CWE-352
High
WordPress Plugin Tablesome-Responsive Table, Woocommerce Automation, Email Log, Form Automation-Contact Form 7, Elementor, WPForms, Forminator Cross-Site Scripting (1.0.27)
CVE-2024-29110
CWE-79
High
Oracle JRE Improper Certificate Validation Vulnerability (CVE-2003-1229)
CVE-2003-1229
CWE-295
High
WordPress Plugin Tablesome-Responsive Table, Woocommerce Automation, Email Log, Form Automation-Contact Form 7, Elementor, WPForms, Forminator Cross-Site Request Forgery (1.0.25)
CVE-2024-31388
CWE-352
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms SQL Injection (5.3.1.0)
CVE-2024-1990
CWE-89
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Privilege Escalation (5.3.0.0)
CVE-2024-1991
CWE-269
High
WordPress Plugin User Registration-Custom Registration Form, Login Form, and User Profile Privilege Escalation (3.1.5)
CVE-2024-2417
CWE-269
High
PHP Other Vulnerability (CVE-2003-0249)
CVE-2003-0249
-
High
WordPress Plugin AppPresser-Mobile App Framework Security Bypass (4.3.0)
CVE-2024-32776
CWE-862
High
WordPress Plugin Yoast SEO Cross-Site Scripting (22.6)
CVE-2024-4984
CWE-79
High
WordPress Plugin AppPresser-Mobile App Framework Security Bypass (4.3.2)
CVE-2024-4611
CWE-287
High
WordPress Plugin AliExpress Dropshipping with AliNext Lite Cross-Site Request Forgery (3.3.5)
CVE-2024-37212
CWE-352
High
WordPress Plugin Ad Invalid Click Protector (AICP) Malicious Code (1.2.9)
CVE-2024-6297
CWE-506
High
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Privilege Escalation (1.9.19)
CVE-2024-1505
CWE-269
High
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Multiple Security Bypass Vulnerabilities (1.9.16)
CVE-2024-33912
CWE-862
High
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Information Disclosure (1.9.25)
CVE-2024-35171
CWE-200
High
WordPress Plugin 10Web AI Assistant-AI content writing assistant Security Bypass (1.0.18)
CVE-2023-6985
CWE-862
High
WordPress Plugin Yoast SEO Cross-Site Scripting (21.0)
CVE-2023-40680
CWE-79
High
PHP Other Vulnerability (CVE-2003-0097)
CVE-2003-0097
-
High
OpenSSL Other Vulnerability (CVE-2003-0131)
CVE-2003-0131
-
High
WordPress Plugin Yoast SEO Cross-Site Scripting (22.5)
CVE-2024-4041
CWE-79
High
WordPress Plugin Web Application Firewall-website security Privilege Escalation (2.1.1)
CVE-2024-2172
CWE-269
High
WordPress Plugin Yoast SEO Cross-Site Scripting (20.2)
-
CWE-79
High
PHP Other Vulnerability (CVE-2003-0166)
CVE-2003-0166
-
High
PHP Other Vulnerability (CVE-2003-0172)
CVE-2003-0172
-
High
WordPress Plugin WP Poll Maker-Best WordPress Poll for Voting Contest Arbitrary File Upload (3.4)
CVE-2024-32514
CWE-434
High
WordPress Plugin WP-Members Membership Cross-Site Scripting (3.4.9.2)
CVE-2024-1852
CWE-79
High
WordPress Plugin WP Datepicker Security Bypass (2.1.0)
CVE-2024-3895
CWE-862
High
WordPress Plugin WP Activity Log Premium SQL Injection (4.6.4)
CVE-2024-2018
CWE-89
High
WordPress Plugin WordPress Automatic SQL Injection (3.92.0)
CVE-2024-27956
CWE-89
High
Microsoft SQL Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2003-0230)
CVE-2003-0230
CWE-264
High
WordPress Plugin Web Application Firewall-website security Unspecified Vulnerability (2.1.2)
-
-
High
Microsoft SQL Server Other Vulnerability (CVE-2003-0232)
CVE-2003-0232
-
High
phpMyAdmin Other Vulnerability (CVE-2004-2630)
CVE-2004-2630
-
High
phpMyAdmin Other Vulnerability (CVE-2004-2632)
CVE-2004-2632
-
High
WordPress Plugin PhonePe Payment Solutions Server-Side Request Forgery (1.0.15)
CVE-2022-45835
CWE-918
High
Dotclear Other Vulnerability (CVE-2005-3963)
CVE-2005-3963
-
High
WordPress Plugin Advanced Woo Search Cross-Site Scripting (2.77)
CVE-2023-2452
CWE-79
High
WordPress Plugin Advanced Custom Fields PRO Security Bypass (5.12)
CVE-2022-23183
CWE-862
High
WordPress Plugin Advanced Custom Fields PRO PHP Object Injection (6.0.7)
CVE-2023-1196
CWE-915
High
WordPress Plugin Advanced Custom Fields PRO Information Disclosure (6.0.2)
CVE-2022-40696
CWE-200
High
WordPress Plugin Advanced Custom Fields PRO Cross-Site Scripting (6.1.5)
CVE-2023-30777
CWE-79
High
Joomla Other Vulnerability (CVE-2005-3772)
CVE-2005-3772
-
High
WordPress Plugin Advanced Custom Fields PRO Arbitrary File Upload (5.12.2)
CVE-2022-2594
CWE-434
High