Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
Restlet Framework Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-14949)
CVE-2017-14949
CWE-611
High
WordPress Plugin WordPress Download Manager Cross-Site Scripting (2.9.51)
CVE-2017-18032
CWE-79
High
WordPress Plugin WC Duplicate Order Unspecified Vulnerability (1.3)
-
-
High
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-15098)
CVE-2017-15098
CWE-200
High
WordPress Plugin UpiCRM-Free WordPress CRM and Lead Management Information Disclosure (2.1.8.5)
-
CWE-538
High
WordPress Plugin uCare-Support Ticket System Cross-Site Scripting (1.2.1)
-
CWE-79
High
WordPress Plugin Spiffy Calendar Cross-Site Scripting (3.2.0)
CVE-2017-9420
CWE-79
High
WordPress Plugin Skype Legacy Buttons Multiple Vulnerabilities (3.0.4)
-
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15734)
CVE-2017-15734
CWE-352
High
WordPress Plugin Simple Login Log SQL Injection (1.1.1)
-
CWE-89
High
WordPress Plugin ShiftNav-Responsive Mobile Menu Cross-Site Scripting (1.5.2)
-
CWE-79
High
Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2017-15710)
CVE-2017-15710
CWE-787
High
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2017-15715)
CVE-2017-15715
CWE-20
High
WordPress Plugin Save Contact Form 7 SQL Injection (1.7)
-
CWE-89
High
WordPress Plugin Save Contact Form 7 Information Disclosure (2.0)
-
CWE-200
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15729)
CVE-2017-15729
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15730)
CVE-2017-15730
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15731)
CVE-2017-15731
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15732)
CVE-2017-15732
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15733)
CVE-2017-15733
CWE-352
High
WordPress Plugin WP Fastest Cache Arbitrary File Deletion (0.8.9.0)
CVE-2019-6726
CWE-73
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.3.17)
CVE-2018-19287
CWE-79
High
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3193)
CVE-2015-3193
CWE-200
High
WordPress Plugin WP Hotel Booking Cross-Site Request Forgery (1.10.1)
-
CWE-352
High
WordPress Plugin HyperComments Arbitrary File Deletion (1.2.2)
-
CWE-73
High
WordPress Plugin Helios Solutions Brand Logo Slider Arbitrary File Upload (2.1)
-
CWE-434
High
WordPress Plugin Dynamic Content for Elementor Remote Code Execution (1.9.5.6)
CVE-2020-26596
CWE-94
High
WordPress Plugin Comment System for WordPress & Ajax Comments-Comment Press Cross-Frame Scripting (2.7.0)
-
CWE-79
High
WordPress Plugin Coditor-Code Editor Security Bypass (1.1)
-
CWE-264
High
WordPress Plugin CM Download Manager Cross-Site Scripting (2.7.0)
CVE-2020-27344
CWE-79
High
WordPress Plugin Child Theme Creator by Orbisius Cross-Site Request Forgery (1.5.1)
CVE-2020-28649
CWE-352
High
WordPress Plugin Appointment Booking Calendar-BirchPress Scheduler Unspecified Vulnerability (1.13.0)
-
-
High
WordPress Plugin Advanced Booking Calendar SQL Injection (1.6.1)
-
CWE-89
High
WordPress Plugin WP Project Manager-Task, team, and project management featuring kanban board and gantt charts Cross-Site Request Forgery (2.4.0)
CVE-2020-36745
CWE-352
High
WordPress Plugin WP ERP-Complete WordPress Business Manager with HR, CRM & Accounting Systems for Small Businesses Cross-Site Request Forgery (1.6.3)
-
CWE-352
High
Apache Tomcat Improper Input Validation Vulnerability (CVE-2013-2185)
CVE-2013-2185
CWE-20
High
Apache HTTP Server CVE-2013-2249 Vulnerability (CVE-2013-2249)
CVE-2013-2249
-
High
WordPress Plugin WP Courses LMS Security Bypass (2.0.28)
CVE-2020-26876
CWE-264
High
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Cross-Site Request Forgery (2.3.9)
-
CWE-352
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Request Forgery (2.9.4)
-
CWE-352
High
WordPress Plugin Sticky Menu, Sticky Header (or anything!) on Scroll Cross-Site Request Forgery (2.2)
-
CWE-352
High
WordPress Plugin Slider by 10Web-Responsive Image Slider SQL Injection (1.2.35)
CVE-2021-24132
CWE-89
High
WordPress Plugin Simple:Press-WordPress Forum Arbitrary File Upload (6.6.0)
-
CWE-434
High
WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Cross-Site Request Forgery (3.4.2)
-
CWE-352
High
Oracle JRE CVE-2013-2394 Vulnerability (CVE-2013-2394)
CVE-2013-2394
-
High
WordPress Plugin Radio Buttons for Taxonomies Cross-Site Request Forgery (2.0.5)
-
CWE-352
High
WordPress Plugin Product Catalog X Cross-Site Request Forgery (1.5.12)
-
CWE-352
High
Jboss EAP Improper Input Validation Vulnerability (CVE-2013-2185)
CVE-2013-2185
CWE-20
High
WordPress Plugin Live Chat-Live support Cross-Site Request Forgery (3.1.0)
CVE-2020-5642
CWE-352
High
WordPress Plugin NotificationX-WooCommerce Sales Notification Popup, Custom & Live Sales Notification, FOMO, Social Proof, Announcement Banner & Sticky Notification Bar Cross-Site Request Forgery (1.8.2)
-
CWE-352
High
WordPress Plugin Team Showcase Multiple Vulnerabilities (1.22.15)
CVE-2020-35939
CWE-915
High
WordPress Plugin Advanced Classifieds & Directory Pro Cross-Site Scripting (1.7.5)
-
CWE-79
High
WordPress Plugin Abandoned Cart Lite for WooCommerce SQL Injection (5.8.1)
-
CWE-89
High
WordPress Plugin WPBakery Page Builder Cross-Site Scripting (6.4.0)
CVE-2020-28650
CWE-79
High
WordPress Plugin WP Mailster Cross-Site Scripting (1.6.1)
-
CWE-79
High
WordPress Plugin WP-Lister Lite for eBay Directory Traversal (2.0.20)
CVE-2017-1000170
CWE-22
High
WordPress Plugin WP-Lister Lite for Amazon Directory Traversal (0.9.6.35)
CVE-2017-1000170
CWE-22
High
WordPress Plugin WP Google Maps Unspecified Vulnerability (8.0.25)
-
-
High
WordPress Plugin WP Activity Log Cross-Site Request Forgery (4.1.3.2)
-
CWE-352
High
WordPress Plugin WordPress+Microsoft Office 365/Azure AD-LOGIN Unspecified Vulnerability (11.6)
CVE-2020-26511
-
High
WordPress Plugin TI WooCommerce Wishlist Security Bypass (1.21.11)
-
CWE-264
High
WordPress Plugin Super Store Finder for WordPress (Google Maps Store Locator) Arbitrary File Upload (6.1)
-
CWE-434
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2165)
CVE-2013-2165
CWE-264
High
WordPress Plugin Super Logos Showcase for WordPress Arbitrary File Upload (2.2)
-
CWE-434
High
WordPress Plugin Super Interactive Maps for WordPress Arbitrary File Upload (1.9)
-
CWE-434
High
WordPress Plugin Simple Download Monitor Multiple Vulnerabilities (3.8.8)
CVE-2020-5651
CWE-89
High
WordPress Plugin Realia Security Bypass (1.4.0)
-
CWE-264
High
WordPress Plugin Quick Chat Cross-Site Scripting (4.14)
-
CWE-79
High
WordPress Plugin PowerPress Podcasting by Blubrry Arbitrary File Upload (8.3.7)
CVE-2021-24123
CWE-434
High
WordPress Plugin Post Grid Multiple Vulnerabilities (2.0.71)
CVE-2020-35938
CWE-915
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Unspecified Vulnerability (3.4.27.1)
CVE-2020-36173
-
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Request Forgery (3.4.27)
CVE-2020-36174
CWE-352
High
WordPress Plugin Mailster-Email Newsletter for WordPress Cross-Site Scripting (2.4.5.1)
-
CWE-79
High
WordPress Plugin Loginizer SQL Injection (1.6.3)
CVE-2020-27615
CWE-89
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Request Forgery (2.4.2)
CVE-2020-36754
CWE-352
High