Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-0773)
CVE-2016-0773
CWE-119
High
WordPress Plugin Open Graph for Facebook, Google+ and Twitter Card Tags Cross-Site Scripting (2.2.4)
CVE-2018-0579
CWE-79
High
WordPress Plugin My WordPress Login Logo Multiple Unspecified Vulnerabilities (2.1)
-
-
High
Jenkins Improper Input Validation Vulnerability (CVE-2016-0792)
CVE-2016-0792
CWE-20
High
WildFly Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0793)
CVE-2016-0793
CWE-200
High
OpenSSL Other Vulnerability (CVE-2016-0797)
CVE-2016-0797
-
High
OpenSSL Resource Management Errors Vulnerability (CVE-2016-0798)
CVE-2016-0798
-
High
WordPress Plugin My Calendar Cross-Site Scripting (2.5.16)
-
CWE-79
High
WordPress Plugin Like Button Rating-LikeBtn Security Bypass (2.5.3)
-
CWE-264
High
WordPress Plugin Simple Fields Local File Inclusion (0.3.5)
-
CWE-22
High
WordPress Plugin Synchi Arbitrary File Deletion (5.1)
-
CWE-73
High
WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.3)
CVE-2018-0576
CWE-79
High
WordPress Plugin CF7 Invisible reCAPTCHA Cross-Site Scripting (1.3.1)
CVE-2018-21012
CWE-79
High
WordPress Plugin Page and Post Clone Information Disclosure (1.1)
-
CWE-200
High
WordPress Plugin Metronet Tag Manager Cross-Site Request Forgery (1.2.7)
-
CWE-352
High
WordPress Plugin Mass Pages/Posts Creator Cross-Site Scripting (1.2.2)
CVE-2018-11580
CWE-79
High
WordPress Plugin Loginizer Cross-Site Scripting (1.3.9)
CVE-2018-11366
CWE-79
High
WordPress Plugin Google Drive for WordPress Information Disclosure (2.2)
-
CWE-538
High
WordPress Plugin GD bbPress Attachments Cross-Site Scripting (2.5)
-
CWE-79
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Multiple Vulnerabilities (1.12.25)
-
CWE-89
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder CSV Injection (1.12.22)
CVE-2018-10504
CWE-20
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (3.4.12)
-
CWE-79
High
WordPress Plugin Custom css-js-php Unspecified Vulnerability (2.0.2)
-
-
High
WordPress Plugin WP with Spritz Local/Remote File Inclusion (1.0)
-
CWE-98
High
WordPress Plugin UK Cookie Consent Cross-Site Scripting (2.3.9)
CVE-2018-10310
CWE-79
High
WordPress Plugin WP-VR-view-Add Photo Sphere, 360 video to WordPress Cross-Site Scripting (1.6)
-
CWE-79
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (8.0.05)
CVE-2018-9864
CWE-79
High
WordPress Plugin WP Image Zoom Denial of Service (1.23)
-
CWE-400
High
WordPress Plugin WP Background Takeover Directory Traversal (4.1.4)
CVE-2018-9118
CWE-22
High
WordPress Plugin WP Activity Log Information Disclosure (3.1.1)
CVE-2018-8719
CWE-200
High
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Scripting (4.0.3)
CVE-2018-0577
CWE-79
High
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.3)
CVE-2018-9844
CWE-79
High
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.2)
CVE-2018-9172
CWE-79
High
WordPress Plugin Woo Import Export Arbitrary File Deletion (1.0)
-
CWE-73
High
WordPress Plugin VRView Cross-Site Scripting (1.1.3)
-
CWE-79
High
WordPress Plugin Google Drive for WordPress Arbitrary File Deletion (2.2)
-
CWE-73
High
Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10002)
CVE-2016-10002
CWE-200
High
WordPress Plugin Peugeot Music Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Newsletters PHP Object Injection (4.6.8.5)
-
CWE-915
High
WordPress Plugin WL Katalogsok PHP Object Injection (3.5.4)
-
CWE-915
High
WordPress Plugin Site Editor-WordPress Site Builder-Theme Builder and Page Builder Local File Inclusion (1.1.1)
CVE-2018-7422
CWE-22
High
WordPress Plugin Simple Instagram Feed Cross-Site Scripting (1.3)
-
CWE-79
High
Osclass Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10751)
CVE-2016-10751
CWE-22
High
e107 Deserialization of Untrusted Data Vulnerability (CVE-2016-10753)
CVE-2016-10753
CWE-502
High
AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10755)
CVE-2016-10755
CWE-138
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability (2.2.46)
CVE-2018-7586
-
High
Perl Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-1238)
CVE-2016-1238
CWE-264
High
Apache Tomcat Improper Input Validation Vulnerability (CVE-2016-1240)
CVE-2016-1240
CWE-20
High
Nginx Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2016-1247)
CVE-2016-1247
CWE-59
High
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1499)
CVE-2016-1499
CWE-200
High
WordPress Plugin WooCommerce Save For Later Cart Enhancement PHP Object Injection (1.0.6)
-
CWE-915
High
WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (4.1.6)
-
CWE-79
High
WordPress Plugin Manage and respond to conversations with leads-HappyForms PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Security Bypass (3.4.4)
-
CWE-287
High
WordPress Plugin Limit Login Attempts Reloaded Cross-Site Scripting (2.7.0)
-
CWE-79
High
PHP Numeric Errors Vulnerability (CVE-2016-1904)
CVE-2016-1904
-
High
WordPress Plugin Limit Login Attempts Cross-Site Scripting (1.7.1)
CVE-2023-1912
CWE-79
High
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-1927)
CVE-2016-1927
-
High
GlassFish Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-1950)
CVE-2016-1950
CWE-119
High
WordPress Plugin iThemes Security (formerly Better WP Security) Unspecified Vulnerability (6.9.0)
CVE-2018-7433
-
High
WordPress Plugin IP Logger Arbitrary File Upload (3.1)
-
CWE-434
High
PHP Improper Input Validation Vulnerability (CVE-2016-10712)
CVE-2016-10712
CWE-20
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Multiple Vulnerabilities (1.1.9)
CVE-2018-8711
CWE-94
High
Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10003)
CVE-2016-10003
CWE-200
High
PHP Numeric Errors Vulnerability (CVE-2016-10158)
CVE-2016-10158
-
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10007)
CVE-2016-10007
CWE-138
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10008)
CVE-2016-10008
CWE-138
High
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10037)
CVE-2016-10037
CWE-22
High
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10038)
CVE-2016-10038
CWE-22
High
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10039)
CVE-2016-10039
CWE-22
High
Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10073)
CVE-2016-10073
CWE-200
High
WordPress Plugin Disc Golf Manager PHP Object Injection (1.0.0)
-
CWE-915
High
Piwigo Improper Access Control Vulnerability (CVE-2016-10084)
CVE-2016-10084
CWE-284
High
Piwigo Improper Access Control Vulnerability (CVE-2016-10085)
CVE-2016-10085
CWE-284
High
WordPress Plugin Contact Form DB CSV Injection (2.10.32)
CVE-2018-9035
CWE-20
High