Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
Phusion Passenger Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-12027)
CVE-2018-12027
CWE-200
High
Phusion Passenger Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-12028)
CVE-2018-12028
CWE-732
High
Phusion Passenger Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2018-12029)
CVE-2018-12029
CWE-362
High
WordPress Plugin WordPress Mobile app Builder-Convert WordPress site to native mobile apps Arbitrary File Upload (1.05)
CVE-2017-1002001
CWE-434
High
WordPress Plugin WordPress Download Manager Cross-Site Request Forgery (2.8.99)
-
CWE-352
High
WordPress Plugin WHIZZ Cross-Site Request Forgery (1.1)
CVE-2017-8099
CWE-352
High
Jetty Session Fixation Vulnerability (CVE-2018-12538)
CVE-2018-12538
CWE-384
High
WordPress Plugin Webapp builder (Free mobile apps native iPhone iOS & Android Winphone mobile apps) Arbitrary File Upload (2.0)
CVE-2017-1002002
CWE-434
High
phpMyAdmin Improper Authentication Vulnerability (CVE-2018-12613)
CVE-2018-12613
CWE-287
High
WordPress Plugin Watu Quiz Unspecified Vulnerability (2.6)
-
-
High
WordPress Plugin WP-SpamFree Anti-Spam Cross-Site Scripting (2.1.1.6)
-
CWE-79
High
Joomla Improper Privilege Management Vulnerability (CVE-2018-11323)
CVE-2018-11323
CWE-269
High
Joomla Improper Input Validation Vulnerability (CVE-2018-12712)
CVE-2018-12712
CWE-20
High
WordPress Plugin AccessPress Social Icons Cross-Site Scripting (1.6.6)
-
CWE-79
High
WordPress Plugin Advanced Shipping Validation for WooCommerce Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin AdSense Manager Cross-Site Scripting (4.0.3)
-
CWE-79
High
WordPress Plugin Add Custom Link to WordPress Admin Bar Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Active Extra Fields Cross-Site Scripting (1.0.1)
-
CWE-79
High
PHP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-10546)
CVE-2018-10546
CWE-835
High
WordPress Plugin Active Directory Authentication Integration Cross-Site Scripting (0.6)
-
CWE-79
High
PHP NULL Pointer Dereference Vulnerability (CVE-2018-10548)
CVE-2018-10548
CWE-476
High
PHP Out-of-bounds Read Vulnerability (CVE-2018-10549)
CVE-2018-10549
CWE-125
High
WordPress Plugin AccessPress Social Icons Multiple SQL Injection Vulnerabilities (1.6.6)
-
CWE-89
High
Liferay Portal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-10795)
CVE-2018-10795
CWE-434
High
WordPress Plugin Access Expiration Cross-Site Scripting (1.1)
-
CWE-79
High
Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-11322)
CVE-2018-11322
CWE-434
High
WordPress Plugin AB Press Optimizer Multiple Cross-Site Scripting Vulnerabilities (1.1.1)
-
CWE-79
High
Moodle CVE-2018-10891 Vulnerability (CVE-2018-10891)
CVE-2018-10891
-
High
Jolokia Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-10899)
CVE-2018-10899
CWE-352
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-10915)
CVE-2018-10915
CWE-138
High
PostgreSQL Incorrect Authorization Vulnerability (CVE-2018-10925)
CVE-2018-10925
CWE-863
High
WordPress Plugin A.M.Y. Cross-Site Scripting (1.3.3)
-
CWE-79
High
WordPress Plugin 3xSocializer Cross-Site Scripting (0.98.22)
-
CWE-79
High
WebLogic Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2018-11040)
CVE-2018-11040
CWE-829
High
WordPress Plugin 123devis-affiliation Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin Zibbra Cross-Site Scripting (1.7.0)
-
CWE-79
High
WordPress Plugin YOP Poll Cross-Site Scripting (5.8.0)
CVE-2017-2127
CWE-79
High
WordPress Plugin Vospari Forms Cross-Site Scripting (1.3)
-
CWE-79
High
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-12895)
CVE-2018-12895
CWE-22
High
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-10188)
CVE-2018-10188
CWE-352
High
WebLogic CVE-2018-15756 Vulnerability (CVE-2018-15756)
CVE-2018-15756
-
High
WordPress Plugin Mobile App Native (Make a mobile app-Native iPhone & Android Mobile App FREE) Arbitrary File Upload (3.0)
CVE-2017-6104
CWE-434
High
WordPress Plugin Membership Simplified Multiple SQL Injection Vulnerabilities (1.58)
CVE-2017-1002010
CWE-89
High
Python Missing Initialization of Resource Vulnerability (CVE-2018-14647)
CVE-2018-14647
CWE-909
High
WordPress Plugin Membership Simplified Arbitrary File Download (1.58)
CVE-2017-1002008
CWE-538
High
WordPress Plugin Membership & Content Restriction-Paid Member Subscriptions Multiple Unspecified Vulnerabilities (1.4.0)
-
-
High
PHP Integer Overflow or Wraparound Vulnerability (CVE-2018-14883)
CVE-2018-14883
CWE-190
High
PHP NULL Pointer Dereference Vulnerability (CVE-2018-14884)
CVE-2018-14884
CWE-476
High
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-15132)
CVE-2018-15132
CWE-200
High
WordPress Plugin MAC PHOTO GALLERY Arbitrary File Download (3.0)
-
CWE-538
High
WordPress Plugin Laika Pedigree Tree Unspecified Vulnerability (0.13.4)
-
-
High
WordPress Plugin Kama Click Counter Cross-Site Scripting (3.4.9)
CVE-2017-18615
CWE-79
High
WordPress Plugin nBill Lite PHP Object Injection (3.2.2)
-
CWE-915
High
WordPress Plugin Invite Anyone Security Bypass (1.3.14)
CVE-2017-6955
CWE-264
High
Joomla CVE-2018-15881 Vulnerability (CVE-2018-15881)
CVE-2018-15881
-
High
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-15901)
CVE-2018-15901
CWE-352
High
WordPress Plugin Invite Anyone Multiple Vulnerabilities (1.3.15)
-
CWE-352
High
WordPress Plugin How to Create an App for Android iPhone Easytouch Arbitrary File Upload (3.0)
CVE-2017-1002000
CWE-434
High
WordPress Plugin Gwolle Guestbook Multiple Vulnerabilities (2.1.0)
-
CWE-352
High
e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-16388)
CVE-2018-16388
CWE-434
High
WordPress Plugin Redux Framework Multiple Cross-Site Scripting Vulnerabilities (3.6.0.2)
-
CWE-79
High
Ruby CVE-2018-16396 Vulnerability (CVE-2018-16396)
CVE-2018-16396
-
High
WordPress Plugin Google Analytics Dashboard Cross-Site Scripting (2.1.1)
-
CWE-79
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-14630)
CVE-2018-14630
CWE-94
High
WordPress Plugin NewStatPress Cross-Site Scripting (1.2.4)
-
CWE-79
High
Opencart Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-13067)
CVE-2018-13067
CWE-352
High
WordPress Plugin Relevanssi Premium-A Better Search Cross-Site Scripting (1.14.8)
-
CWE-79
High
WordPress Plugin VaultPress Man-in-The-Middle (MiTM) Remote Code Execution (1.8.6)
-
CWE-94
High
WordPress Plugin Trust Form Cross-Site Scripting (2.0)
-
CWE-79
High
WordPress Plugin TablePress Unspecified Vulnerability (1.7)
-
-
High
WordPress Plugin SP Project & Document Manager Unspecified Vulnerability (2.6.2.5)
-
-
High
WordPress Plugin Social Sticky Animated Backdoor (1.0)
-
CWE-95
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.6.2)
-
CWE-79
High
WordPress Plugin Slideshow Gallery LITE Cross-Site Scripting (1.6.4)
-
CWE-79
High
WordPress Plugin SLIDER PHOTO GALLERY Multiple Vulnerabilities (1.0)
-
CWE-538
High