Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Booster for WooCommerce PHP Object Injection (3.0.1)
-
CWE-915
High
WordPress Plugin BackWPup Security Bypass (3.4.1)
CVE-2017-2551
CWE-552
High
WordPress Plugin BackupBuddy Multiple Vulnerabilities (8.0.1.8)
-
CWE-915
High
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2017-0367)
CVE-2017-0367
CWE-668
High
WordPress Plugin Appointments PHP Object Injection (2.2.1)
-
CWE-915
High
WordPress Plugin All Post Contact Form Arbitrary File Upload (1.1.4)
-
CWE-434
High
WordPress Plugin Display Widgets Spam Links Injection (2.6.3.1)
-
CWE-610
High
WordPress Plugin Fitness Trainer-Training Membership Cross-Site Scripting (1.0.8)
-
CWE-79
High
WordPress Plugin Shoppable Images Multiple Vulnerabilities (1.0.0)
-
CWE-915
High
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9837)
CVE-2016-9837
CWE-264
High
WordPress Plugin Shibboleth Cross-Site Scripting (1.7)
CVE-2017-14313
CWE-79
High
WordPress Plugin Share on Diaspora Cross-Site Scripting (0.7.1)
-
CWE-79
High
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-9707)
CVE-2016-9707
CWE-611
High
WordPress Plugin Share Drafts Publicly Information Disclosure (1.1.4)
-
CWE-200
High
WordPress Plugin Gallery-Image and Video Gallery with Thumbnails SQL Injection (1.2.0)
CVE-2017-14125
CWE-89
High
WordPress Plugin Post Pay Counter PHP Object Injection (2.730)
-
CWE-915
High
WordPress Plugin Participants Database Cross-Site Scripting (1.7.5.9)
CVE-2017-14126
CWE-79
High
Serendipity Server-Side Request Forgery (SSRF) Vulnerability (CVE-2016-9752)
CVE-2016-9752
CWE-918
High
Apache Tomcat Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2016-9774)
CVE-2016-9774
CWE-59
High
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9775)
CVE-2016-9775
CWE-264
High
Joomla Improper Access Control Vulnerability (CVE-2016-9838)
CVE-2016-9838
CWE-284
High
WordPress Plugin Flickrpress PHP Object Injection (1.0.2)
-
CWE-915
High
MySQL CVE-2016-9840 Vulnerability (CVE-2016-9840)
CVE-2016-9840
-
High
MySQL CVE-2016-9842 Vulnerability (CVE-2016-9842)
CVE-2016-9842
-
High
WordPress Plugin MediaPress Security Bypass (1.1.9)
-
CWE-264
High
WordPress Plugin Media Library Assistant PHP Object Injection (2.60)
-
CWE-915
High
WordPress Plugin Media from FTP PHP Object Injection (9.79)
-
CWE-915
High
WordPress Plugin MarketPress-WordPress eCommerce PHP Object Injection (3.2.6)
-
CWE-915
High
WordPress Plugin MailPoet Newsletters (Previous) Unspecified Vulnerability (2.7.8)
-
-
High
WordPress Plugin Invite Anyone PHP Object Injection (1.3.18)
-
CWE-915
High
WordPress Plugin Ginger-EU Cookie Law Multiple Vulnerabilities (4.1.3)
-
CWE-915
High
WordPress Plugin furikake Open Redirect (0.1.0)
CVE-2017-1000434
CWE-601
High
WordPress Plugin Football Pool Arbitrary File Upload (2.6.3)
-
CWE-434
High
WordPress Plugin IBPS Online Exam Multiple Vulnerabilities (1.0)
-
CWE-89
High
ZenCart Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-11675)
CVE-2017-11675
CWE-94
High
WordPress Plugin Chunks Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin WordPress Social Stream Information Disclosure (1.6)
-
CWE-522
High
Moment.js Uncontrolled Resource Consumption Vulnerability (CVE-2017-18214)
CVE-2017-18214
CWE-400
High
WordPress Plugin WP Post to PDF Enhanced Cross-Site Scripting (1.0.5)
-
CWE-79
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-18260)
CVE-2017-18260
CWE-138
High
WordPress Plugin WP No External Links Cross-Site Scripting (3.5.18)
CVE-2017-15863
CWE-79
High
Ampache Deserialization of Untrusted Data Vulnerability (CVE-2017-18375)
CVE-2017-18375
CWE-502
High
WordPress Plugin WP Htaccess Editor Unspecified Vulnerability (1.0.1)
-
-
High
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-1103)
CVE-2017-1103
CWE-611
High
WordPress Plugin WP Booking System Cross-Site Scripting (1.3.3)
CVE-2017-2168
CWE-79
High
WordPress Plugin WP Athletics SQL Injection (1.1.7)
-
CWE-89
High
WordPress Plugin WordPress Ultra Simple Paypal Shopping Cart Multiple Cross-Site Scripting Vulnerabilities (4.3.9.0)
-
CWE-79
High
WordPress Plugin WordPress Facebook SQL Injection (1.0.13)
-
CWE-89
High
WordPress Plugin WP Statistics Cross-Site Scripting (12.0.5)
-
CWE-79
High
WordPress Plugin WordPress Button Plugin MaxButtons Cross-Site Scripting (6.18)
CVE-2017-2169
CWE-79
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Unspecified Vulnerability (1.5.6)
-
-
High
WordPress Plugin Visual Composer:Page Builder for WordPress Local File Inclusion (5.1)
-
CWE-22
High
WordPress Plugin User Access Manager Cross-Site Scripting (1.2.14)
-
CWE-79
High
WordPress Plugin Ultimate Addons for Visual Composer Multiple Vulnerabilities (3.16.10)
-
CWE-352
High
WordPress Plugin Tracking Code Manager Multiple Vulnerabilities (1.11.1)
-
CWE-400
High
WordPress Plugin Top 10-Popular posts for WordPress SQL Injection (2.4.3)
-
CWE-89
High
WordPress Plugin Timber Cross-Site Scripting (1.2.2)
-
CWE-79
High
WordPress Plugin Team Members Unspecified Vulnerability (2.1.2)
-
-
High
WordPress Plugin Surveys SQL Injection (1.01.8)
CVE-2017-1002022
CWE-89
High
WordPress Plugin WP Session Manager SQL Injection (1.2.1)
-
CWE-89
High
Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-18113)
CVE-2017-18113
CWE-94
High
WordPress Plugin Social Share Buttons-Social Pug Multiple Unspecified Vulnerabilities (1.3.1)
-
-
High
WordPress Plugin Easy PayPal Buy Now Button Multiple Vulnerabilities (1.7.2)
-
CWE-352
High
WordPress Plugin Event List SQL Injection (0.7.8)
CVE-2017-9429
CWE-89
High
WordPress Plugin Event Calendar WD-Responsive Event Calendar Cross-Site Scripting (1.0.93)
CVE-2017-2224
CWE-79
High
WordPress Plugin EELV Newsletter Multiple Vulnerabilities (4.6)
-
CWE-352
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-17827)
CVE-2017-17827
CWE-352
High
WordPress Plugin Easy PayPal Gift Certificate Multiple Vulnerabilities (1.2.3)
-
CWE-352
High
Dolibarr Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-17898)
CVE-2017-17898
CWE-200
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17916)
CVE-2017-17916
CWE-138
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17917)
CVE-2017-17917
CWE-138
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17919)
CVE-2017-17919
CWE-138
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17920)
CVE-2017-17920
CWE-138
High
WordPress Plugin Easy Custom Sidebars Unspecified Vulnerability (1.0.1)
-
-
High
WordPress Plugin YouTube Embed Cross-Site Scripting (5.0.1)
-
CWE-79
High