Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Maintenance Cross-Site Request Forgery (3.6.4)
-
CWE-352
High
WordPress Plugin Login or Logout Menu Item Security Bypass (1.1.1)
CVE-2019-15820
CWE-264
High
WordPress Plugin Listing, Classified Ads & Business Directory-uListing Arbitrary File Upload (1.2.1)
-
CWE-434
High
WordPress Plugin Link Log-external link click monitor SQL Injection (2.0)
CVE-2015-9344
CWE-89
High
LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-5017)
CVE-2014-5017
CWE-138
High
WordPress Plugin Learning Courses Privilege Escalation (4.7)
CVE-2019-15775
CWE-264
High
WordPress Plugin JSON API Open Redirect (1.1.3)
-
CWE-601
High
WordPress Plugin JoomSport-for Sports: Team & League, Football, Hockey & more SQL Injection (3.3)
CVE-2019-14348
CWE-89
High
WordPress Plugin Import Social Events Cross-Site Scripting (1.6.6)
-
CWE-79
High
WordPress Plugin UserPro-Community and User Profile Cross-Site Scripting (4.9.33)
CVE-2019-14470
CWE-79
High
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Multiple Vulnerabilities (2.2.4)
CVE-2019-15858
CWE-264
High
WordPress Plugin HandL UTM Grabber Security Bypass (2.6.4)
CVE-2019-15769
CWE-264
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (3.2.6)
CVE-2019-16520
CWE-79
High
WordPress Plugin Portrait-Archiv.com Photostore Cross-Site Scripting (3.1)
-
CWE-79
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Vulnerabilities (1.5.34)
CVE-2019-16119
CWE-89
High
WordPress Plugin Human Presence Cross-Site Scripting (2.0.8)
-
CWE-79
High
WordPress Plugin Groundhogg-Marketing Automation & CRM for WordPress Arbitrary File Disclosure (2.0.9.4)
-
CWE-538
High
WordPress Plugin Event Tickets CSV Injection (4.10.7.1)
CVE-2019-16120
CWE-20
High
WordPress Plugin ECPay Logistics for WooCommerce Cross-Site Scripting (1.2.181030)
-
CWE-79
High
WordPress Plugin Easy Registration Forms Unspecified Vulnerability (1.8.4)
-
-
High
WordPress Plugin DW Mega Menu Cross-Site Request Forgery (1.0.1)
-
CWE-352
High
WordPress Plugin Checklist Cross-Site Scripting (1.1.5)
CVE-2019-16525
CWE-79
High
WordPress Plugin API Bearer Auth Cross-Site Scripting (20181229)
CVE-2019-16332
CWE-79
High
WordPress Plugin Advanced Access Manager Unspecified Vulnerability (5.9.8.1)
-
-
High
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Security Bypass (2.2.5)
CVE-2019-14773
CWE-264
High
WordPress Plugin Zero BS WordPress CRM Cross-Site Request Forgery (2.99.9)
-
CWE-352
High
WordPress Plugin WP-ViperGB Cross-Site Scripting (1.3.15)
CVE-2015-9356
CWE-79
High
WordPress Plugin WP-Spreadplugin Multiple Vulnerabilities (4.4.4)
-
CWE-352
High
WordPress Plugin WP Social Feed Gallery Cross-Site Request Forgery (2.4.7)
CVE-2019-15779
CWE-352
High
WordPress Plugin WP Shopify Cross-Site Scripting (2.0.4)
-
CWE-79
High
WordPress Plugin WP Private Content Plus Security Bypass (1.31)
CVE-2019-15816
CWE-264
High
WordPress Plugin WP Photo Album Plus Unspecified Vulnerability (7.2.04)
-
-
High
WordPress Plugin WP Fastest Cache Directory Traversal (0.8.9.5)
CVE-2019-13635
CWE-22
High
WordPress Plugin WP DSGVO Tools (GDPR) Cross-Site Request Forgery (2.2.18)
CVE-2019-15777
CWE-352
High
WordPress Plugin WP Add Mime Types Cross-Site Request Forgery (2.2.1)
-
CWE-352
High
WordPress Plugin WordPress Portfolio and Gallery-GridKit Gallery Unspecified Vulnerability (1.8.18)
-
-
High
WordPress Plugin Import Export WordPress Users CSV Injection (1.3.1)
CVE-2019-15092
CWE-20
High
WordPress Plugin GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership Arbitrary File Upload (1.4.14)
-
CWE-434
High
WordPress Plugin Save Abandoned Carts-WooCommerce Live Checkout Field Capture Unspecified Vulnerability (3.2.1)
-
-
High
WordPress Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2014-6412)
CVE-2014-6412
CWE-640
High
WordPress Plugin WPS Child Theme Generator Directory Traversal (1.1)
CVE-2019-15822
CWE-22
High
WordPress Plugin WPS Bidouille Multiple Vulnerabilities (1.12.2)
-
CWE-434
High
WordPress Plugin WP SVG Icons Cross-Site Request Forgery (3.2.1)
CVE-2019-14216
CWE-352
High
WordPress Plugin WP Statistics SQL Injection (12.6.6.1)
CVE-2019-13275
CWE-89
High
WordPress Plugin WP Statistics Cross-Site Scripting (12.6.7)
-
CWE-79
High
WordPress Plugin WP Review Unspecified Vulnerability (5.2.1)
-
-
High
WordPress Plugin WP-Matomo (WP-Piwik) Unspecified Vulnerability (1.0.18)
-
-
High
WordPress Plugin WP Like Button Security Bypass (1.6.0)
CVE-2019-13344
CWE-264
High
WordPress Plugin WP Google Maps Cross-Site Scripting (7.11.34)
CVE-2019-14792
CWE-79
High
WordPress Plugin WP Code Highlight.js Cross-Site Request Forgery (0.6.2)
CVE-2019-12934
CWE-352
High
Ruby Resource Management Errors Vulnerability (CVE-2014-6438)
CVE-2014-6438
-
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-6046)
CVE-2014-6046
CWE-352
High
WordPress Plugin WordPress Ultra Simple Paypal Shopping Cart Cross-Site Request Forgery (4.4)
CVE-2019-5992
CWE-352
High
WordPress Plugin WooCommerce Product Feed for Google, Facebook, eBay and Many More Cross-Site Scripting (3.1.14)
CVE-2019-1010124
CWE-79
High
WordPress Plugin WooCommerce Cross-Site Request Forgery (3.6.4)
-
CWE-352
High
WordPress Plugin Widget for Facebook Page Feeds Cross-Site Scripting (5.0)
-
CWE-79
High
WordPress Plugin WebLibrarian SQL Injection (3.5.4)
CVE-2019-1010034
CWE-89
High
WordPress Plugin WC Duplicate Order Security Bypass (1.5)
-
CWE-264
High
WordPress Plugin Watu Quiz Cross-Site Scripting (3.1.2.4)
-
CWE-79
High
WordPress Plugin Watu Quiz Cross-Site Scripting (3.1.2.5)
-
CWE-79
High
WordPress Plugin Visitor Traffic Real Time Statistics Cross-Site Request Forgery (1.12)
CVE-2019-15832
CWE-352
High
WordPress Plugin Vertical News Scroller Cross-Site Scripting (1.9)
-
CWE-79
High
WordPress Plugin Variation Swatches for WooCommerce Cross-Site Scripting (1.0.61)
CVE-2019-14774
CWE-79
High
WordPress Plugin WPS Cleaner Multiple Cross-Site Request Forgery Vulnerabilities (1.4.4)
-
CWE-352
High
phpMyFAQ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-6045)
CVE-2014-6045
CWE-138
High
WordPress Plugin GiveWP-Donation and Fundraising Platform SQL Injection (2.5.0)
CVE-2019-13578
CWE-89
High
WordPress Plugin cformsII HTML Injection (15.0.1)
CVE-2019-15238
CWE-79
High
WordPress Plugin GD Rating System Unspecified Vulnerability (2.6)
-
-
High
WeBid Other Vulnerability (CVE-2014-5114)
CVE-2014-5114
-
High
WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder PHP Object Injection (4.02)
CVE-2019-15780
CWE-915
High
WordPress Plugin Event Espresso 4 Decaf-Event Registration Event Ticketing Cross-Site Request Forgery (4.9.82)
-
CWE-352
High
WordPress Plugin Essential Grid Portfolio-Photo Gallery Security Bypass (1.1.2)
-
CWE-264
High
WordPress CVE-2014-5203 Vulnerability (CVE-2014-5203)
CVE-2014-5203
-
High
WordPress Plugin Easy2Map Cross-Site Scripting (1.5.5)
-
CWE-79
High
WordPress Plugin Easy Registration Forms Cross-Site Scripting (1.8.3)
-
CWE-79
High