Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Donations Privilege Escalation (1.3)
CVE-2019-15772
CWE-264
High
WordPress Plugin Customize Feeds for Twitter Cross-Site Request Forgery (1.8.8)
-
CWE-352
High
WordPress Plugin CSS & JavaScript Toolbox SQL Injection (9.2)
-
CWE-89
High
WordPress Plugin Cache-Control Unspecified Vulnerability (2.2.3)
-
-
High
WordPress Plugin WPS Hide Login Multiple Security Bypass Vulnerabilities (1.5.2.2)
CVE-2019-15826
CWE-264
High
WordPress Plugin Booking Privilege Escalation (2.4)
CVE-2019-15774
CWE-264
High
WordPress Plugin Booking Multiple Vulnerabilities (2.5)
-
CWE-352
High
WordPress Plugin Bold Page Builder Security Bypass (2.3.1)
CVE-2019-15821
CWE-264
High
WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler PHP Object Injection (5.7.0)
-
CWE-915
High
WordPress Plugin Backup and Staging by WP Time Capsule PHP Object Injection (1.21.9)
-
CWE-915
High
WordPress Plugin AnyComment Cross-Site Scripting (0.0.32)
CVE-2018-21001
CWE-79
High
WordPress Plugin Additional Variation Images for WooCommerce Cross-Site Scripting (1.1.28)
CVE-2019-15778
CWE-79
High
WordPress Plugin 10Web Social Feed for Instagram Security Bypass (1.3.18)
-
CWE-264
High
WordPress Plugin Yoast SEO Cross-Site Scripting (11.5)
CVE-2019-13478
CWE-79
High
WordPress Plugin Yes-co ORES Cross-Site Scripting (1.3.44)
-
CWE-79
High
WordPress Plugin WPS Limit Login Multiple Vulnerabilities (1.4.5)
-
CWE-352
High
WordPress Plugin Qwizcards-online quizzes and flashcards Cross-Site Scripting (3.36)
-
CWE-79
High
WordPress Plugin Search Exclude Security Bypass (1.2.2)
CVE-2019-15895
CWE-264
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.51)
CVE-2019-14947
CWE-79
High
WordPress Plugin Staff Directory-Employee Directory for WordPress Unspecified Vulnerability (3.6.1)
-
-
High
PHP CVE-2014-3515 Vulnerability (CVE-2014-3515)
CVE-2014-3515
-
High
WordPress Plugin Ultimate FAQ Security Bypass (1.8.24)
CVE-2019-17233
CWE-264
High
WordPress Plugin Travelpayouts:All Travel Brands in One Place Cross-Site Scripting (0.7.12)
-
CWE-79
High
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3530)
CVE-2014-3530
CWE-200
High
WordPress Plugin TRADIES Information Disclosure (2.2.6)
-
CWE-200
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3541)
CVE-2014-3541
CWE-94
High
WordPress Plugin Theme Editor Multiple Vulnerabilities (2.1)
-
CWE-434
High
WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.5.0)
-
CWE-79
High
WordPress Plugin Swift Landing Page Cross-Site Request Forgery (1.1)
-
CWE-352
High
WordPress Plugin Starter Templates-Elementor, WordPress & Beaver Builder Templates Cross-Site Scripting (1.3.20)
-
CWE-79
High
WordPress Plugin SoundPress Cross-Site Scripting (2.2.6)
-
CWE-79
High
OpenSSL Improper Input Validation Vulnerability (CVE-2014-3513)
CVE-2014-3513
CWE-20
High
WordPress Plugin Social Metrics Tracker Cross-Site Scripting (1.6.8)
-
CWE-79
High
WordPress Plugin Sliced Invoices-WordPress Invoice Multiple Vulnerabilities (3.8.2)
-
CWE-200
High
WordPress Plugin SKU Shortlink For WooCommerce Arbitrary File Disclosure (1.3.4)
-
CWE-538
High
WordPress Plugin Simple Fields Cross-Site Scripting (1.4.11)
-
CWE-79
High
WordPress Plugin Shield Security-Smart Bot Blocking & Intrusion Prevention Security Cross-Site Scripting (8.2.2)
-
CWE-79
High
WordPress Plugin Rich Reviews Cross-Site Scripting (1.7.4)
-
CWE-79
High
WordPress Plugin Request a Quote Cross-Site Scripting (2.0.0)
-
CWE-79
High
WordPress Plugin Quick Buy For Woocommerce Arbitrary File Disclosure (2.0)
-
CWE-538
High
OpenSSL Improper Input Validation Vulnerability (CVE-2014-3567)
CVE-2014-3567
CWE-20
High
WordPress Plugin Qode Twitter Feed (embeded in Bridge-Creative Multi-Purpose WordPress Theme) Open Redirect (2.0.1)
-
CWE-601
High
WordPress Plugin Qode Instagram Widget (embeded in Bridge-Creative Multi-Purpose WordPress Theme) Open Redirect (2.0.1)
-
CWE-601
High
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3514)
CVE-2014-3514
CWE-264
High
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3512)
CVE-2014-3512
CWE-119
High
WordPress Plugin Product Subtitle For WooCommerce Arbitrary File Disclosure (4.1)
-
CWE-538
High
WordPress Plugin WP Security Safe Cross-Site Request Forgery (2.2.2)
-
CWE-352
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (4.3.0)
CVE-2019-20361
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Multiple Vulnerabilities (4.2.2)
CVE-2019-19985
CWE-352
High
WordPress Plugin Currency Switcher for WooCommerce Security Bypass (2.11.1)
CVE-2019-18668
CWE-264
High
WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler Cross-Site Scripting (5.8.1)
CVE-2019-17550
CWE-79
High
WordPress Plugin Zoho CRM Lead Magnet Cross-Site Scripting (1.6.9.1)
CVE-2019-19306
CWE-79
High
WordPress Plugin Zedna Contact form Directory Traversal (1.1)
-
CWE-22
High
WordPress Plugin Zedna Contact form Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin YouTube Gallery-Best YouTube Video Gallery Cross-Site Scripting (3.2.1)
-
CWE-79
High
WordPress Plugin WPeMatico RSS Feed Fetcher Cross-Site Scripting (2.3.7)
-
CWE-79
High
WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts Multiple Vulnerabilities (2.0.11)
CVE-2019-6012
CWE-89
High
WordPress Plugin WP Telegram (Auto Post and Notifications) Unspecified Vulnerability (2.1.8)
-
-
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Request Forgery (8.0.37)
-
CWE-352
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Multiple Vulnerabilities (3.3.0)
CVE-2019-16932
CWE-918
High
WordPress Plugin WP Email Template HTML Injection (2.2.10)
-
CWE-79
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3482)
CVE-2014-3482
CWE-138
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3483)
CVE-2014-3483
CWE-138
High
WordPress Plugin WordPress Framework Possible Backdoor (1.0)
-
CWE-95
High
Jboss EAP Other Vulnerability (CVE-2014-3490)
CVE-2014-3490
-
High
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Request Forgery (4.0.9)
-
CWE-352
High
WordPress Plugin WordPress Email Template Designer-WP HTML Mail HTML Injection (2.9.0.3)
-
CWE-79
High
WordPress Plugin Word of the day Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Cross-Site Scripting (2.2.7)
CVE-2019-16289
CWE-79
High
WordPress Plugin WooCommerce Open Redirect (3.7.0)
-
CWE-601
High
WordPress Plugin Web to Print Online Designer Security Bypass (2.3.0)
-
CWE-264
High
WordPress Plugin PushEngage Web Push Notifications Cross-Site Scripting (1.5.8)
-
CWE-79
High
WordPress Plugin Prevent files/folders access Cross-Site Request Forgery (1.1.1)
-
CWE-352
High
WordPress Plugin Sell Downloads Cross-Site Scripting (1.0.86)
-
CWE-79
High
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.11.8)
CVE-2019-16521
CWE-79
High