Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin PropertyHive Cross-Site Scripting (1.4.14)
CVE-2018-6465
CWE-79
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4051)
CVE-2016-4051
CWE-119
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4052)
CVE-2016-4052
CWE-119
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Cross-Site Scripting (2.6.6)
-
CWE-79
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4054)
CVE-2016-4054
CWE-119
High
WordPress Plugin Power Charts-Responsive Beautiful Charts & Graphs Cross-Site Scripting (0.1.0)
-
CWE-79
High
WordPress Plugin Injectbody Spam Injection (All)
-
CWE-610
High
Squid Improper Input Validation Vulnerability (CVE-2016-2571)
CVE-2016-2571
CWE-20
High
WordPress Plugin Google Forms Server-Side Request Forgery (0.91)
-
CWE-918
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability (2.2.46)
CVE-2018-7586
-
High
Riot.js Resource Management Errors Vulnerability (CVE-2016-10527)
CVE-2016-10527
-
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Multiple Vulnerabilities (1.1.9)
CVE-2018-8711
CWE-94
High
WordPress Plugin WooCommerce Save For Later Cart Enhancement PHP Object Injection (1.0.6)
-
CWE-915
High
PHP Improper Input Validation Vulnerability (CVE-2016-10712)
CVE-2016-10712
CWE-20
High
WordPress Plugin WL Katalogsok PHP Object Injection (3.5.4)
-
CWE-915
High
WordPress Plugin Site Editor-WordPress Site Builder-Theme Builder and Page Builder Local File Inclusion (1.1.1)
CVE-2018-7422
CWE-22
High
WordPress Plugin Simple Instagram Feed Cross-Site Scripting (1.3)
-
CWE-79
High
Osclass Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10751)
CVE-2016-10751
CWE-22
High
e107 Deserialization of Untrusted Data Vulnerability (CVE-2016-10753)
CVE-2016-10753
CWE-502
High
AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10755)
CVE-2016-10755
CWE-138
High
Perl Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-1238)
CVE-2016-1238
CWE-264
High
WordPress Plugin 10Web Social Feed for Instagram Multiple Cross-Site Scripting Vulnerabilities (1.3.0)
CVE-2018-10301
CWE-79
High
Apache Tomcat Improper Input Validation Vulnerability (CVE-2016-1240)
CVE-2016-1240
CWE-20
High
Nginx Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2016-1247)
CVE-2016-1247
CWE-59
High
WordPress Plugin Newsletters PHP Object Injection (4.6.8.5)
-
CWE-915
High
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1499)
CVE-2016-1499
CWE-200
High
WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (4.1.6)
-
CWE-79
High
WordPress Plugin Manage and respond to conversations with leads-HappyForms PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Security Bypass (3.4.4)
-
CWE-287
High
WordPress Plugin Limit Login Attempts Reloaded Cross-Site Scripting (2.7.0)
-
CWE-79
High
PHP Numeric Errors Vulnerability (CVE-2016-1904)
CVE-2016-1904
-
High
WordPress Plugin Limit Login Attempts Cross-Site Scripting (1.7.1)
CVE-2023-1912
CWE-79
High
WordPress Plugin WordPress Social Share, Social Login and Social Comments-Super Socializer Security Bypass (7.10.6)
-
CWE-287
High
WordPress Plugin Buddypress Xprofile Custom Fields Type Arbitrary File Deletion (2.6.3)
-
CWE-73
High
GlassFish Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-1950)
CVE-2016-1950
CWE-119
High
Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10073)
CVE-2016-10073
CWE-200
High
WordPress Plugin Like Button Rating-LikeBtn Security Bypass (2.5.3)
-
CWE-264
High
WordPress Plugin Google Drive for WordPress Arbitrary File Deletion (2.2)
-
CWE-73
High
WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.3)
CVE-2018-0576
CWE-79
High
Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10002)
CVE-2016-10002
CWE-200
High
Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10003)
CVE-2016-10003
CWE-200
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10007)
CVE-2016-10007
CWE-138
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10008)
CVE-2016-10008
CWE-138
High
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10037)
CVE-2016-10037
CWE-22
High
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10038)
CVE-2016-10038
CWE-22
High
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10039)
CVE-2016-10039
CWE-22
High
WordPress Plugin Disc Golf Manager PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin Caldera Forms-More Than Contact Forms Multiple Cross-Site Scripting Vulnerabilities (1.5.9.1)
CVE-2018-7747
CWE-79
High
Piwigo Improper Access Control Vulnerability (CVE-2016-10084)
CVE-2016-10084
CWE-284
High
Piwigo Improper Access Control Vulnerability (CVE-2016-10085)
CVE-2016-10085
CWE-284
High
WordPress Plugin Contact Form DB CSV Injection (2.10.32)
CVE-2018-9035
CWE-20
High
PHP Numeric Errors Vulnerability (CVE-2016-10158)
CVE-2016-10158
-
High
PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-10159)
CVE-2016-10159
CWE-190
High
PHP Out-of-bounds Read Vulnerability (CVE-2016-10161)
CVE-2016-10161
CWE-125
High
PHP NULL Pointer Dereference Vulnerability (CVE-2016-10162)
CVE-2016-10162
CWE-476
High
Phusion Passenger Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-10345)
CVE-2016-10345
CWE-264
High
e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10378)
CVE-2016-10378
CWE-138
High
PHP Improper Input Validation Vulnerability (CVE-2016-10397)
CVE-2016-10397
CWE-20
High
ATutor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10400)
CVE-2016-10400
CWE-22
High
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-1927)
CVE-2016-1927
-
High
WordPress Plugin iThemes Security (formerly Better WP Security) Unspecified Vulnerability (6.9.0)
CVE-2018-7433
-
High
Squid Improper Input Validation Vulnerability (CVE-2016-2570)
CVE-2016-2570
CWE-20
High
WordPress Other Vulnerability (CVE-2016-2222)
CVE-2016-2222
-
High
OpenSSL Resource Management Errors Vulnerability (CVE-2016-2179)
CVE-2016-2179
-
High
OpenSSL Out-of-bounds Read Vulnerability (CVE-2016-2180)
CVE-2016-2180
CWE-125
High
OpenSSL Numeric Errors Vulnerability (CVE-2016-2181)
CVE-2016-2181
-
High
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2183)
CVE-2016-2183
CWE-200
High
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2183)
CVE-2016-2183
CWE-200
High
Python Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2183)
CVE-2016-2183
CWE-200
High
WordPress Plugin Share Buttons Cross-Site Scripting (1.3.1)
-
CWE-79
High
PostgreSQL 7PK - Security Features Vulnerability (CVE-2016-2193)
CVE-2016-2193
-
High
WordPress Plugin SG Optimizer Multiple Vulnerabilities (3.3.5)
-
CWE-352
High
WordPress Other Vulnerability (CVE-2016-2221)
CVE-2016-2221
-
High
Oracle Database Server Improper Input Validation Vulnerability (CVE-2016-2381)
CVE-2016-2381
CWE-20
High
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-2176)
CVE-2016-2176
CWE-119
High