Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
OpenSSL Other Vulnerability (CVE-2015-3194)
CVE-2015-3194
-
High
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-7290)
CVE-2017-7290
CWE-138
High
WordPress Plugin PDF & Print by BestWebSoft Cross-Site Scripting (1.9.3)
CVE-2017-18528
CWE-79
High
WordPress Plugin Pagination by BestWebSoft Cross-Site Scripting (1.0.6)
CVE-2017-18527
CWE-79
High
WordPress Plugin MW WP Form Cross-Site Scripting (2.10.0)
-
CWE-79
High
Drupal CVE-2017-6930 Vulnerability (CVE-2017-6930)
CVE-2017-6930
-
High
WordPress Plugin Multilanguage by BestWebSoft Cross-Site Scripting (1.2.1)
CVE-2017-2171
CWE-79
High
WordPress Plugin Mobile Device Detection by 51Degrees Cross-Site Scripting (3.1.5.2)
-
CWE-79
High
PHP Improper Input Validation Vulnerability (CVE-2017-7189)
CVE-2017-7189
CWE-20
High
WordPress Plugin MailChimp Forms by MailMunch Unspecified Vulnerability (2.0.6.3)
-
-
High
WordPress Plugin Login With Ajax Cross-Site Scripting (3.1.6)
-
CWE-79
High
PHP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-7272)
CVE-2017-7272
CWE-918
High
WordPress Plugin LinkedIn by BestWebSoft Cross-Site Scripting (1.0.4)
CVE-2017-18516
CWE-79
High
Drupal Improper Privilege Management Vulnerability (CVE-2017-6924)
CVE-2017-6924
CWE-269
High
WordPress Plugin Limit Attempts by BestWebSoft Cross-Site Scripting (1.1.7)
CVE-2017-2171
CWE-79
High
MODX Improper Certificate Validation Vulnerability (CVE-2017-7322)
CVE-2017-7322
CWE-295
High
MODX CVE-2017-7323 Vulnerability (CVE-2017-7323)
CVE-2017-7323
-
High
Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7415)
CVE-2017-7415
CWE-200
High
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7484)
CVE-2017-7484
CWE-200
High
WordPress Plugin Lightbox Jquery Possible Remote Code Execution (0.24)
-
CWE-94
High
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7486)
CVE-2017-7486
CWE-200
High
WordPress Plugin Latest Posts by BestWebSoft Cross-Site Scripting (0.2)
CVE-2017-2171
CWE-79
High
WordPress Plugin KittyCatfish Ads by Missilesilo SQL Injection (2.2)
-
CWE-89
High
WordPress Plugin Job Board by BestWebSoft Cross-Site Scripting (1.1.3)
CVE-2017-2171
CWE-79
High
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6926)
CVE-2017-6926
CWE-200
High
WordPress Plugin Pinterest by BestWebSoft Cross-Site Scripting (1.0.4)
CVE-2017-18517
CWE-79
High
WordPress Plugin IP Geo Block Security Bypass (2.2.2)
-
CWE-264
High
WordPress Plugin Relevant-Related Posts by BestWebSoft Cross-Site Scripting (1.1.9)
CVE-2017-2171
CWE-79
High
WordPress Plugin Simple Job Board Cross-Site Scripting (2.4.3)
-
CWE-79
High
WordPress Plugin SendGrid Cross-Site Scripting (1.10.7)
-
CWE-79
High
Ruby Improper Input Validation Vulnerability (CVE-2017-6181)
CVE-2017-6181
CWE-20
High
WordPress Plugin Sender by BestWebSoft Cross-Site Scripting (1.2.0)
CVE-2017-18564
CWE-79
High
Drupal Incorrect Authorization Vulnerability (CVE-2017-6377)
CVE-2017-6377
CWE-863
High
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-6379)
CVE-2017-6379
CWE-352
High
Drupal Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2017-6381)
CVE-2017-6381
CWE-829
High
PHP NULL Pointer Dereference Vulnerability (CVE-2017-6441)
CVE-2017-6441
CWE-476
High
WordPress Plugin Search Everything SQL Injection (8.1.6)
-
CWE-89
High
WordPress Plugin Rimons Twitter Widget Cross-Site Scripting (1.2.4)
-
CWE-79
High
WordPress Plugin Realty by BestWebSoft Cross-Site Scripting (1.0.9)
CVE-2017-18532
CWE-79
High
WordPress Plugin Popular Posts by BestWebSoft Cross-Site Scripting (1.0.4)
CVE-2017-2171
CWE-79
High
WordPress Plugin Re-attacher by BestWebSoft Cross-Site Scripting (1.0.8)
CVE-2017-2171
CWE-79
High
WordPress Plugin Rating by BestWebSoft Cross-Site Scripting (0.1)
CVE-2017-18530
CWE-79
High
WordPress Plugin Quotes and Tips by BestWebSoft Cross-Site Scripting (1.32)
CVE-2017-2171
CWE-79
High
WordPress Plugin PromoBar by BestWebSoft Cross-Site Scripting (1.1.0)
CVE-2017-18529
CWE-79
High
WordPress Plugin Profile Extra Fields by BestWebSoft Cross-Site Scripting (1.0.7)
CVE-2017-2171
CWE-79
High
WordPress Plugin Post Type Switcher Multiple Unspecified Vulnerabilities (1.5.0)
-
-
High
WordPress Plugin Post to CSV by BestWebSoft Cross-Site Scripting (1.3.0)
CVE-2017-2171
CWE-79
High
WordPress Plugin Post Grid, List for WordPress-Content Views Cross-Site Scripting (1.9.0)
-
CWE-79
High
Drupal CVE-2017-6919 Vulnerability (CVE-2017-6919)
CVE-2017-6919
-
High
WordPress Plugin Portfolio by BestWebSoft Cross-Site Scripting (2.39)
CVE-2017-2171
CWE-79
High
Nginx Integer Overflow or Wraparound Vulnerability (CVE-2017-7529)
CVE-2017-7529
CWE-190
High
WordPress Plugin Image Rotator Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin SMTP by BestWebSoft Cross-Site Scripting (1.0.9)
CVE-2017-18518
CWE-79
High
SharePoint Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-8501)
CVE-2017-8501
CWE-119
High
WordPress Plugin Error Log Viewer by BestWebSoft Cross-Site Scripting (1.0.5)
CVE-2017-18562
CWE-79
High
Serendipity Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-8101)
CVE-2017-8101
CWE-352
High
WordPress Plugin Email Queue by BestWebSoft Cross-Site Scripting (1.1.1)
CVE-2017-2171
CWE-79
High
WordPress Plugin Easy Forms for MailChimp Unspecified Vulnerability (6.3.11)
-
-
High
Roundcube Improper Privilege Management Vulnerability (CVE-2017-8114)
CVE-2017-8114
CWE-269
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Information Disclosure (2.7.6)
-
CWE-200
High
WordPress Plugin Dynamic Featured Image Unspecified Vulnerability (1.0.3)
-
-
High
WordPress Plugin DosCero.Menu Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Donate by BestWebSoft Cross-Site Scripting (2.1.1)
CVE-2017-2171
CWE-79
High
WordPress Plugin Custom Search by BestWebSoft Cross-Site Scripting (1.35)
CVE-2017-18494
CWE-79
High
SharePoint CVE-2017-8509 Vulnerability (CVE-2017-8509)
CVE-2017-8509
-
High
WordPress Plugin Facebook Button by BestWebSoft Cross-Site Scripting (2.53)
CVE-2017-2171
CWE-79
High
SharePoint CVE-2017-8511 Vulnerability (CVE-2017-8511)
CVE-2017-8511
-
High
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-8569)
CVE-2017-8569
CWE-707
High
SharePoint Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-8742)
CVE-2017-8742
CWE-119
High
SharePoint Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-8743)
CVE-2017-8743
CWE-119
High
WordPress Plugin Custom Fields Search by BestWebSoft Cross-Site Scripting (1.3.1)
CVE-2017-2171
CWE-79
High
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-8810)
CVE-2017-8810
CWE-200
High
WordPress Plugin Custom Admin Page by BestWebSoft Cross-Site Scripting (0.1.1)
CVE-2017-18493
CWE-79
High
WordPress Plugin CopySafe Web Protection Cross-Site Request Forgery (2.5)
CVE-2017-8100
CWE-352
High
MediaWiki Improper Input Validation Vulnerability (CVE-2017-8814)
CVE-2017-8814
CWE-20
High