Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WP Inventory Manager Cross-Site Scripting (1.7.8)
-
CWE-79
High
OpenSSL Improper Input Validation Vulnerability (CVE-2014-3513)
CVE-2014-3513
CWE-20
High
WordPress Plugin Zielke Specialized Catalog Arbitrary File Upload (3.0.7)
-
CWE-434
High
WordPress Plugin Advanced Woo Search Unspecified Vulnerability (1.69)
-
-
High
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-1789)
CVE-2015-1789
CWE-119
High
WordPress Plugin Affiliates Manager Cross-Site Request Forgery (2.6.5)
CVE-2019-15868
CWE-352
High
WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Cross-Site Scripting (2.2.7)
CVE-2019-16289
CWE-79
High
WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.5.38)
-
CWE-79
High
WordPress Plugin Analytics Cross-Site Scripting (1.2.3)
-
CWE-79
High
WordPress Plugin Battle Suit for Divi Security Bypass (1.10.1)
-
CWE-264
High
WordPress Plugin Blog Designer Cross-Site Scripting (1.8.11)
-
CWE-79
High
ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-1583)
CVE-2015-1583
CWE-352
High
WordPress Plugin Carts Guru PHP Object Injection (1.4.5)
CVE-2019-12241
CWE-915
High
WordPress Plugin CF7 Manual Spam Blocker Privilege Escalation (1.0)
-
CWE-264
High
WordPress Plugin CheetahO Image Compression and Optimizer Unspecified Vulnerability (1.4.2.1)
-
-
High
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3514)
CVE-2014-3514
CWE-264
High
PHP CVE-2014-3515 Vulnerability (CVE-2014-3515)
CVE-2014-3515
-
High
WordPress Plugin WooCommerce Open Redirect (3.7.0)
-
CWE-601
High
WordPress Plugin WP Google Maps SQL Injection (7.11.17)
CVE-2019-10692
CWE-89
High
WordPress Plugin YouTube Gallery-Best YouTube Video Gallery Cross-Site Scripting (3.2.1)
-
CWE-79
High
WordPress Plugin Ultimate Membership Pro Cross-Site Request Forgery (8.6.2)
-
CWE-352
High
WordPress Plugin WPeMatico RSS Feed Fetcher Cross-Site Scripting (2.3.7)
-
CWE-79
High
WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts Multiple Vulnerabilities (2.0.11)
CVE-2019-6012
CWE-89
High
WordPress Plugin WP Telegram (Auto Post and Notifications) Unspecified Vulnerability (2.1.8)
-
-
High
WordPress Plugin WP Security Safe Cross-Site Request Forgery (2.2.2)
-
CWE-352
High
WordPress Plugin Ultimate Membership Pro Cross-Site Request Forgery (8.6.1)
-
CWE-352
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Request Forgery (8.0.37)
-
CWE-352
High
WordPress Plugin WP Email Template HTML Injection (2.2.10)
-
CWE-79
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3482)
CVE-2014-3482
CWE-138
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3483)
CVE-2014-3483
CWE-138
High
WordPress Plugin WordPress Framework Possible Backdoor (1.0)
-
CWE-95
High
WordPress Plugin Ultimate Membership Pro Security Bypass (8.6)
-
CWE-264
High
WordPress Plugin WP Google Maps Cross-Site Request Forgery (7.11.27)
-
CWE-352
High
WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Unspecified Vulnerability (7.2)
-
-
High
WordPress Plugin Social Sharing-Social Warfare Cross-Site Scripting (3.5.3)
-
CWE-79
High
WordPress Plugin WP Support Plus Responsive Ticket System Cross-Site Scripting (9.1.1)
CVE-2019-7299
CWE-79
High
Jboss EAP Other Vulnerability (CVE-2014-3490)
CVE-2014-3490
-
High
WordPress Plugin WooCommerce Smart Coupons Security Bypass (4.6.0)
-
CWE-264
High
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Unspecified Vulnerability (2.4.3)
-
-
High
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Request Forgery (4.0.9)
-
CWE-352
High
WordPress Plugin WordPress Email Template Designer-WP HTML Mail HTML Injection (2.9.0.3)
-
CWE-79
High
WordPress Plugin Word of the day Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin WP Database Backup Cross-Site Request Forgery (5.1.2)
-
CWE-352
High
WordPress Plugin Abandoned Cart Pro for WooCommerce Cross-Site Scripting (7.11.1)
-
CWE-79
High
WordPress Plugin WP SlackSync Information Disclosure (1.8.5)
CVE-2019-14366
CWE-200
High
Oracle JRE CVE-2014-2428 Vulnerability (CVE-2014-2428)
CVE-2014-2428
-
High
WordPress Plugin YITH WooCommerce Recover Abandoned Cart Security Bypass (1.3.2)
CVE-2019-16251
CWE-264
High
WordPress Plugin LeaderBoard Cross-Site Request Forgery (1.1.1)
-
CWE-352
High
Drupal CVE-2014-1475 Vulnerability (CVE-2014-1475)
CVE-2014-1475
-
High
ownCloud Other Vulnerability (CVE-2014-2054)
CVE-2014-2054
-
High
ownCloud Other Vulnerability (CVE-2014-2055)
CVE-2014-2055
-
High
WordPress Plugin AccessAlly PHP Code Execution (3.3.1)
-
CWE-94
High
ownCloud Other Vulnerability (CVE-2014-2056)
CVE-2014-2056
-
High
WordPress Plugin YITH WooCommerce Social Login Security Bypass (1.3.4)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH WooCommerce Request A Quote Security Bypass (1.4.7)
CVE-2019-16251
CWE-264
High
WordPress Plugin Analytics-Gtag Restricted File Upload (1.8.1)
-
CWE-79
High
WordPress Plugin YITH WooCommerce Quick View Security Bypass (1.3.13)
CVE-2019-16251
CWE-264
High
ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-2051)
CVE-2014-2051
CWE-94
High
WordPress Plugin YITH WooCommerce Questions and Answers Security Bypass (1.1.9)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH WooCommerce Product Bundles Security Bypass (1.1.15)
CVE-2019-16251
CWE-264
High
Jenkins CVE-2014-2063 Vulnerability (CVE-2014-2063)
CVE-2014-2063
-
High
WordPress Plugin YITH WooCommerce Product Add-Ons Security Bypass (1.5.21)
CVE-2019-16251
CWE-264
High
WordPress Plugin Sagenda-Free booking system PHP Object Injection (1.3.2)
CVE-2019-10912
CWE-502
High
WordPress Plugin YITH WooCommerce Points and Rewards Security Bypass (1.3.4)
CVE-2019-16251
CWE-264
High
WordPress Plugin Loco Translate Local File Inclusion (2.2.1)
-
CWE-22
High
WordPress Plugin YITH WooCommerce PDF Invoice and Shipping List Security Bypass (1.2.12)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH WooCommerce Order Tracking Security Bypass (1.2.10)
CVE-2019-16251
CWE-264
High
ownCloud Other Vulnerability (CVE-2014-2053)
CVE-2014-2053
-
High
WordPress Plugin YITH WooCommerce Stripe Security Bypass (2.0.1)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH WooCommerce Multi-step Checkout Security Bypass (1.7.4)
CVE-2019-16251
CWE-264
High
WordPress Plugin CSS Hero Cross-Site Scripting (4.03)
CVE-2019-19133
CWE-79
High
WordPress Plugin Scoutnet Kalender Cross-Site Scripting (1.1.0)
CVE-2019-19198
CWE-79
High
SharePoint Out-of-bounds Write Vulnerability (CVE-2014-1761)
CVE-2014-1761
CWE-787
High
WordPress Plugin Search Meter CSV Injection (2.13.2)
CVE-2020-11548
CWE-20
High
Dotclear Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-1613)
CVE-2014-1613
CWE-94
High