Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Blog Designer Cross-Site Scripting (1.8.11)
-
CWE-79
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Request Forgery (2.0.39)
CVE-2019-10673
CWE-352
High
PHP Use After Free Vulnerability (CVE-2015-1351)
CVE-2015-1351
CWE-416
High
WordPress Plugin Justified Gallery Unspecified Vulnerability (1.4.1)
-
-
High
WordPress Plugin Hustle-Pop-Ups, Slide-ins and Email Opt-ins CSV Injection (6.0.7)
CVE-2019-11872
CWE-20
High
WordPress Plugin Hostel Cross-Site Scripting (1.1.3)
CVE-2019-12345
CWE-79
High
markdown-it Inefficient Regular Expression Complexity Vulnerability (CVE-2015-10005)
CVE-2015-10005
CWE-1333
High
WordPress Plugin hashtagger Unspecified Vulnerability (6)
-
-
High
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.4.6)
CVE-2019-15317
CWE-79
High
WordPress Plugin Gallery PhotoBlocks Unspecified Vulnerability (1.1.32)
-
-
High
WordPress Plugin FV Flowplayer Video Player Multiple Vulnerabilities (7.3.14.727)
CVE-2019-14801
CWE-200
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.3.13.727)
CVE-2019-14799
CWE-79
High
WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder SQL Injection (1.13.3)
CVE-2019-10866
CWE-89
High
WordPress Plugin Folders-Organize Pages, Posts and Media Library Folders with Drag and Drop Cross-Site Scripting (2.0.5)
-
CWE-79
High
ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-1583)
CVE-2015-1583
CWE-352
High
WordPress Plugin Floating Chat Widget:Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button-Chaty Unspecified Vulnerability (2.0.5)
-
-
High
WordPress Plugin Event Management Tickets Booking By Event Monster Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin Custom Field Suite Cross-Site Scripting (2.5.14)
CVE-2019-11871
CWE-79
High
WordPress Plugin Custom Field Suite Cross-Site Request Forgery (2.5.15)
-
CWE-352
High
WordPress Plugin Custom CSS Pro Cross-Site Request Forgery (1.0.3)
CVE-2019-5984
CWE-352
High
WordPress Plugin Convert Plus Security Bypass (3.4.2)
-
CWE-264
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-1441)
CVE-2015-1441
CWE-138
High
WordPress Plugin CheetahO Image Compression and Optimizer Unspecified Vulnerability (1.4.2.1)
-
-
High
WordPress Plugin CF7 Manual Spam Blocker Privilege Escalation (1.0)
-
CWE-264
High
WordPress Plugin Carts Guru PHP Object Injection (1.4.5)
CVE-2019-12241
CWE-915
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Unspecified Vulnerability (2.0.40)
-
-
High
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2080)
CVE-2015-2080
CWE-200
High
WordPress Plugin Livemesh Addons for Elementor Security Bypass (2.5.2)
-
CWE-264
High
WordPress Plugin WordPress Social Share Buttons & Analytics-GetSocial.io Cross-Site Request Forgery (4.2)
-
CWE-352
High
WordPress Plugin Advanced Contact form 7 DB SQL Injection (1.6.0)
-
CWE-89
High
MyBB CVE-2015-2352 Vulnerability (CVE-2015-2352)
CVE-2015-2352
-
High
WordPress Plugin A2 Optimized WP Information Disclosure (2.0.10.8)
-
CWE-200
High
WordPress Plugin 404page-your smart custom 404 error page Cross-Site Request Forgery (10.3)
-
CWE-352
High
WordPress Plugin WP Social Feed Gallery Unspecified Vulnerability (2.1.1)
-
-
High
WordPress Plugin WP Mobile Menu-The Mobile-Friendly Responsive Menu Security Bypass (2.7.2)
-
CWE-264
High
WordPress Plugin WP fail2ban Security Bypass (4.0.2)
-
CWE-264
High
WordPress Plugin WP Database Backup Cross-Site Scripting (5.1.1)
CVE-2019-14949
CWE-79
High
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Multiple Security Bypass Vulnerabilities (8.0)
-
CWE-264
High
WordPress Plugin Social Sharing-Social Warfare Multiple Vulnerabilities (3.5.2)
CVE-2019-9978
CWE-94
High
WordPress Plugin Woocommerce User Email Verification Security Bypass (3.3.0)
-
CWE-264
High
WordPress Plugin ApplyOnline-Application Form Builder and Manager Arbitrary File Disclosure (1.9.92)
-
CWE-538
High
WordPress Plugin WooCommerce Cross-Site Scripting (3.5.4)
CVE-2019-9168
CWE-79
High
WordPress Plugin Widgets for SiteOrigin Security Bypass (1.4.2)
-
CWE-264
High
WordPress Plugin Stop User Enumeration Security Bypass (1.3.18)
-
CWE-264
High
WordPress Plugin Sooqr Search Restricted File Upload (1.1.4)
-
CWE-79
High
WordPress Plugin Social Share Icons & Social Share Buttons Security Bypass (3.0.2)
-
CWE-264
High
WordPress Plugin Responsive Filterable Portfolio Unspecified Vulnerability (1.0.8)
-
-
High
WordPress Plugin Post Snippets Security Bypass (3.0.5)
-
CWE-264
High
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Security Bypass (1.7.29)
-
CWE-264
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Security Bypass (3.1.6)
-
CWE-264
High
WordPress Plugin Livemesh SiteOrigin Widgets Security Bypass (2.5.1)
-
CWE-264
High
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Local File Inclusion (4.18.63)
-
CWE-22
High
WordPress Plugin ARI Adminer-WordPress Database Manager Cross-Site Request Forgery (1.1.13)
-
CWE-352
High
WordPress Plugin SupportCandy Arbitrary File Upload (2.0.0)
CVE-2019-11223
CWE-434
High
WordPress Plugin pipdig Power pack (p3) Backdoor (4.7.3)
-
CWE-95
High
Play Framework Improper Input Validation Vulnerability (CVE-2015-2156)
CVE-2015-2156
CWE-20
High
Roundcube Multiple Buffer Overflow Vulnerabilities (CVE-2015-2181)
CVE-2015-2181
-
High
WordPress Plugin Social Share Icons & Social Share Buttons Cross-Site Scripting (3.0.5)
-
CWE-79
High
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-2213)
CVE-2015-2213
CWE-138
High
WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Scripting (2.1.7)
-
CWE-79
High
WordPress Plugin SMTP Mailer Cross-Site Request Forgery (1.0.6)
-
CWE-352
High
WordPress Plugin Simple Ajax Shoutbox SQL Injection (2.2.1)
-
CWE-89
High
WordPress Plugin RSS Redirect & Feedburner Alternative Unspecified Vulnerability (1.9)
-
-
High
WordPress Plugin Resize Image After Upload Cross-Site Request Forgery (1.8.5)
-
CWE-352
High
WordPress Plugin Related Posts Cross-Site Scripting (5.12.91)
CVE-2019-11869
CWE-79
High
WordPress Plugin Login No Captcha reCAPTCHA Security Bypass (1.4.1)
-
CWE-264
High
WordPress Plugin Child Themes Helper Multiple Vulnerabilities (2.0)
-
CWE-538
High
WordPress Plugin Loco Translate Local File Inclusion (2.2.1)
-
CWE-22
High
WordPress Plugin LeaderBoard Cross-Site Request Forgery (1.1.1)
-
CWE-352
High
WordPress Plugin Instagram Feed Unspecified Vulnerability (1.11.3)
-
-
High
PHP Other Vulnerability (CVE-2015-2301)
CVE-2015-2301
-
High
WordPress Plugin Groundhogg-Marketing Automation & CRM for WordPress Remote Code Execution (1.3.4)
CVE-2019-15647
CWE-94
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (4.0.13)
-
CWE-79
High
WordPress Plugin Easy Updates Manager Privilege Escalation (8.0.4)
CVE-2019-15650
CWE-264
High
PHP Out-of-bounds Read Vulnerability (CVE-2015-2325)
CVE-2015-2325
CWE-125
High