Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WP Meta and Date Remover Cross-Site Request Forgery (1.7.5)
-
CWE-352
High
WordPress Plugin WP-Live Chat by 3CX Information Disclosure (8.0.28)
-
CWE-200
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (8.0.27)
-
CWE-79
High
WordPress Plugin Crelly Slider Arbitrary File Upload (1.3.4)
CVE-2019-15866
CWE-434
High
WordPress Plugin Custom 404 Pro Cross-Site Scripting (3.2.8)
CVE-2019-14789
CWE-79
High
WordPress Plugin WP Job Manager Unspecified Vulnerability (1.32.2)
-
-
High
WordPress Plugin Import and export users and customers Cross-Site Request Forgery (1.14.1.3)
CVE-2019-14683
CWE-352
High
WordPress Plugin LiveChat-WP live chat Cross-Site Scripting (3.7.3)
-
CWE-79
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-9240)
CVE-2014-9240
CWE-138
High
WordPress Plugin Live Chat Unlimited Cross-Site Scripting (2.8.3)
-
CWE-79
High
WordPress Plugin LionScripts:IP Blocker Lite Cross-Site Request Forgery (10.3)
-
CWE-352
High
MediaWiki Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2014-9277)
CVE-2014-9277
CWE-138
High
WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (4.2997)
CVE-2019-15649
CWE-94
High
WordPress Plugin Import and export users and customers Directory Traversal (1.14.2)
CVE-2019-15326
CWE-22
High
PHP Other Vulnerability (CVE-2014-9425)
CVE-2014-9425
-
High
PHP DEPRECATED: Code Vulnerability (CVE-2014-9426)
CVE-2014-9426
-
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9427)
CVE-2014-9427
CWE-119
High
WordPress Plugin Import and export users and customers Cross-Site Scripting (1.14.1.2)
CVE-2019-15327
CWE-79
High
WordPress Plugin iLive-Intelligent WordPress Live Chat Support Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin Deny All Firewall Cross-Site Request Forgery (1.1.6)
CVE-2019-14681
CWE-352
High
WordPress Plugin HTML5 Maps Cross-Site Request Forgery (1.6.5.6)
CVE-2019-5983
CWE-352
High
WordPress Plugin Gallery-Responsive Photo and Video Gallery by Limb Cross-Site Scripting (1.3.2)
CVE-2019-14790
CWE-79
High
WordPress Plugin GA Backend Tracking Cross-Site Scripting (1.2)
-
CWE-79
High
WordPress Plugin FG PrestaShop to WooCommerce Cross-Site Scripting (3.19.1)
-
CWE-79
High
WordPress Plugin Facebook for WooCommerce Cross-Site Request Forgery (1.9.14)
CVE-2019-15841
CWE-352
High
WordPress Plugin Excel-Like Price Changer for WooCommerce and WP E-commerce-Light Multiple Vulnerabilities (2.1.5)
-
CWE-538
High
WordPress Plugin Enhanced Plugin Admin Cross-Site Scripting (1.15)
-
CWE-79
High
TYPO3 Improper Input Validation Vulnerability (CVE-2014-9509)
CVE-2014-9509
CWE-20
High
WordPress Plugin easy pdf restaurant menu upload Cross-Site Scripting (1.1.1)
CVE-2019-15842
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (2.9.15)
CVE-2019-15116
CWE-79
High
WordPress Plugin Dropshix Security Bypass (4.0.13)
-
CWE-264
High
WordPress Plugin WP-Live Chat by 3CX Arbitrary File Upload (8.0.31)
CVE-2019-11185
CWE-434
High
WordPress Plugin WP Inventory Manager Unspecified Vulnerability (1.8.1)
-
-
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-9115)
CVE-2014-9115
CWE-138
High
WordPress Plugin PollDeep Arbitrary File Upload (1.2)
-
CWE-434
High
WordPress Plugin Simple File List Multiple Vulnerabilities (3.2.4)
-
CWE-538
High
WordPress Plugin Simple Feature Requests Free Unspecified Vulnerability (1.0.4)
-
-
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Unspecified Vulnerability (2.1.8)
-
-
High
WordPress Plugin SAML SP Single Sign On-SSO login Unspecified Vulnerability (4.8.70)
-
-
High
WordPress Plugin SAML SP Single Sign On-SSO login Cross-Site Scripting (4.8.72)
CVE-2019-12346
CWE-79
High
WordPress Plugin RSVPMaker SQL Injection (5.6.3)
CVE-2018-21004
CWE-89
High
WordPress Plugin Related YouTube Videos Cross-Site Request Forgery (1.9.8)
CVE-2019-5980
CWE-352
High
MySQL CVE-2015-0411 Vulnerability (CVE-2015-0411)
CVE-2015-0411
-
High
WordPress Plugin Register IPs Unspecified Vulnerability (1.8.0)
-
-
High
WordPress Plugin Print My Blog-Print, PDF, & eBook Converter Server-Side Request Forgery (1.6.5)
CVE-2019-11565
CWE-918
High
WordPress Plugin Pinblocks-Gutenberg blocks with Pinterest widgets Unspecified Vulnerability (1.0.1)
-
-
High
WordPress Plugin Slimstat Analytics Cross-Site Request Forgery (4.8.3)
-
CWE-352
High
WordPress Plugin PHP Everywhere Security Bypass (1.3)
-
CWE-264
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Local File Inclusion (1.5.24)
CVE-2019-14798
CWE-22
High
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.22)
CVE-2019-14797
CWE-79
High
WordPress Plugin Pctags-Pinterest conversion tags for Pinterest Ads (advertising) + Event tracking + Site verification + WooCommerce Security Bypass (1.0.1)
-
CWE-264
High
WordPress Plugin Passster Age Gate Security Bypass (4.0.6)
-
CWE-264
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Open Redirect (2.0.5)
-
CWE-601
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Cross-Site Scripting (2.8.2)
-
CWE-79
High
WordPress Plugin Ninja Forms with File Uploads Extension Multiple Vulnerabilities (3.0.22)
CVE-2019-10869
CWE-434
High
WordPress Plugin My Calendar Cross-Site Scripting (3.1.9)
CVE-2019-15713
CWE-79
High
WordPress Plugin Mobile Booster Security Bypass (1.0)
-
CWE-264
High
WordPress Plugin Mobile blocks Security Bypass (1.0)
-
CWE-264
High
WordPress Plugin Slick Popup:Contact Form 7 Popup Privilege Escalation (1.7.1)
CVE-2019-15867
CWE-264
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.8)
CVE-2019-15112
CWE-79
High
WordPress Plugin WP Dev Powers:ACF Color Coded Field Types Security Bypass (1.0)
-
CWE-264
High
PostgreSQL Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2015-0243)
CVE-2015-0243
CWE-120
High
WordPress Plugin wp-buddha-free-adwords Security Bypass (1.0.0)
-
CWE-264
High
WordPress Plugin WP Booking System Multiple Vulnerabilities (1.5.1)
CVE-2019-12239
CWE-352
High
WordPress Plugin WordPress Robots.txt optimization (+ XML Sitemap)-Website traffic, SEO & ranking Booster Security Bypass (1.2.5.1)
-
CWE-264
High
WordPress Plugin Woocommerce Products Price Bulk Edit Cross-Site Scripting (2.2.0)
CVE-2019-14796
CWE-79
High
WordPress Plugin WooCommerce PayPlug Unspecified Vulnerability (3.1.0)
-
-
High
WordPress Plugin WooCommerce Cross-Seller Unspecified Vulnerability (1.0.2)
-
-
High
WordPress Plugin WooCommerce Checkout Manager Cross-Site Request Forgery (4.3)
-
CWE-352
High
PHP Other Vulnerability (CVE-2015-0231)
CVE-2015-0231
-
High
WordPress Plugin Windsor Strava Athlete Unspecified Vulnerability (1.3.5)
-
-
High
PostgreSQL Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2015-0241)
CVE-2015-0241
CWE-120
High
PostgreSQL Out-of-bounds Write Vulnerability (CVE-2015-0242)
CVE-2015-0242
CWE-787
High
WordPress Plugin W3 Total Cache Server-Side Request Forgery (0.9.7.3)
-
CWE-918
High
WordPress Plugin smart Archive Page Remove Unspecified Vulnerability (3)
-
-
High