Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Rencontre-Dating Site Multiple Vulnerabilities (3.2.1)
-
CWE-89
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Unspecified Vulnerability (6.3.5)
-
-
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Scripting (6.3.4)
CVE-2019-17599
CWE-79
High
WordPress Plugin JVM WooCommerce Wishlist Unspecified Vulnerability (1.2.6)
-
-
High
WordPress Plugin WooCommerce PayU India (PayUmoney-PayUbiz) Parameter Tampering (2.1.1)
CVE-2019-14978
CWE-472
High
WordPress Plugin WP Spell Check Cross-Site Request Forgery (7.1.9)
CVE-2019-6027
CWE-352
High
WordPress Plugin YITH WooCommerce Subscription Security Bypass (1.3.4)
CVE-2019-16251
CWE-264
High
PHP Other Vulnerability (CVE-2015-2301)
CVE-2015-2301
-
High
WordPress Plugin 301 Redirects-Easy Redirect Manager Security Bypass (2.40)
CVE-2019-19915
CWE-264
High
Python Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-1912)
CVE-2014-1912
CWE-119
High
WordPress Plugin AdRoll for WooCommerce Stores Unspecified Vulnerability (2.2.5)
-
-
High
WordPress Plugin YITH WooCommerce Zoom Magnifier Security Bypass (1.3.11)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH WooCommerce Wishlist Security Bypass (2.2.13)
CVE-2019-16251
CWE-264
High
ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-2044)
CVE-2014-2044
CWE-94
High
WordPress Plugin YITH WooCommerce Waiting List Security Bypass (1.3.9)
CVE-2019-16251
CWE-264
High
WordPress Plugin Instagram Feed Unspecified Vulnerability (1.11.3)
-
-
High
WordPress Plugin YITH WooCommerce Multi Vendor Security Bypass (3.4.0)
CVE-2019-16251
CWE-264
High
WordPress Plugin Login No Captcha reCAPTCHA Security Bypass (1.4.1)
-
CWE-264
High
WordPress Plugin Ultimate Addons for Elementor Security Bypass (1.20.0)
-
CWE-287
High
Oracle JRE CVE-2014-2412 Vulnerability (CVE-2014-2412)
CVE-2014-2412
-
High
WordPress Plugin YITH WooCommerce Ajax Search Security Bypass (1.6.9)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH WooCommerce Affiliates Security Bypass (1.6.3)
CVE-2019-16251
CWE-264
High
Oracle JRE CVE-2014-2402 Vulnerability (CVE-2014-2402)
CVE-2014-2402
-
High
FluxBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-10029)
CVE-2014-10029
CWE-138
High
WordPress Plugin YITH WooCommerce Advanced Reviews Security Bypass (1.3.9)
CVE-2019-16251
CWE-264
High
Oracle Database Server CVE-2014-2406 Vulnerability (CVE-2014-2406)
CVE-2014-2406
-
High
WordPress Plugin YITH WooCommerce Added to Cart Popup Security Bypass (1.3.11)
CVE-2019-16251
CWE-264
High
Play Framework Improper Input Validation Vulnerability (CVE-2015-2156)
CVE-2015-2156
CWE-20
High
WordPress Plugin YITH Product Size Charts for WooCommerce Security Bypass (1.1.11)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH Pre-Order for WooCommerce Security Bypass (1.1.9)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH WooCommerce Badge Management Security Bypass (1.3.19)
CVE-2019-16251
CWE-264
High
Oracle JRE CVE-2014-2414 Vulnerability (CVE-2014-2414)
CVE-2014-2414
-
High
WordPress Plugin YITH PayPal Express Checkout for WooCommerce Security Bypass (1.2.5)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH Desktop Notifications for WooCommerce Security Bypass (1.2.7)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH Custom Thank You Page for Woocommerce Security Bypass (1.1.6)
CVE-2019-16251
CWE-264
High
WordPress Plugin Backup and Staging by WP Time Capsule Security Bypass (1.21.15)
CVE-2020-8771
CWE-287
High
Oracle JRE CVE-2014-2423 Vulnerability (CVE-2014-2423)
CVE-2014-2423
-
High
Oracle JRE CVE-2014-2427 Vulnerability (CVE-2014-2427)
CVE-2014-2427
-
High
WordPress Plugin SupportCandy Arbitrary File Upload (2.0.0)
CVE-2019-11223
CWE-434
High
WordPress Plugin Simple Link Directory Cross-Site Scripting (7.3.4)
CVE-2019-13463
CWE-79
High
WordPress Plugin YITH WooCommerce Authorize.net Payment Gateway Security Bypass (1.1.12)
CVE-2019-16251
CWE-264
High
Roundcube Multiple Buffer Overflow Vulnerabilities (CVE-2015-2181)
CVE-2015-2181
-
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-26114)
CVE-2026-26114
CWE-502
High
WordPress Plugin ARForms:Wordpress Form Builder Arbitrary File Deletion (3.7.1)
CVE-2019-16902
CWE-73
High
WordPress Plugin pipdig Power pack (p3) Backdoor (4.7.3)
-
CWE-95
High
WordPress Plugin Related Posts Cross-Site Scripting (5.12.91)
CVE-2019-11869
CWE-79
High
WordPress Plugin Resize Image After Upload Cross-Site Request Forgery (1.8.5)
-
CWE-352
High
WordPress Plugin RSS Redirect & Feedburner Alternative Unspecified Vulnerability (1.9)
-
-
High
WordPress Plugin YITH WooCommerce Mailchimp Security Bypass (2.1.3)
CVE-2019-16251
CWE-264
High
Telerik Web UI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2217)
CVE-2014-2217
CWE-22
High
WordPress Plugin YITH WooCommerce Gift Cards Security Bypass (1.3.7)
CVE-2019-16251
CWE-264
High
WordPress Plugin Simple Ajax Shoutbox SQL Injection (2.2.1)
-
CWE-89
High
WordPress Plugin YITH WooCommerce Frequently Bought Together Security Bypass (1.2.10)
CVE-2019-16251
CWE-264
High
WordPress Plugin SMTP Mailer Cross-Site Request Forgery (1.0.6)
-
CWE-352
High
WordPress Plugin Social Share Icons & Social Share Buttons Cross-Site Scripting (3.0.5)
-
CWE-79
High
WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Scripting (2.1.7)
-
CWE-79
High
WordPress Plugin YITH WooCommerce Compare Security Bypass (2.3.13)
CVE-2019-16251
CWE-264
High
WordPress Plugin Awesome Support-WordPress HelpDesk & Support Cross-Site Scripting (5.8.0)
CVE-2019-20181
CWE-79
High
WordPress Plugin YITH WooCommerce Cart Messages Security Bypass (1.4.3)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH WooCommerce Bulk Product Editing Security Bypass (1.2.13)
CVE-2019-16251
CWE-264
High
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-2213)
CVE-2015-2213
CWE-138
High
MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-2311)
CVE-2014-2311
CWE-138
High
WordPress Plugin YITH WooCommerce Brands Add-On Security Bypass (1.3.6)
CVE-2019-16251
CWE-264
High
WordPress Plugin YITH WooCommerce Best Sellers Security Bypass (1.1.11)
CVE-2019-16251
CWE-264
High
WordPress Plugin Ultimate Addons for Beaver Builder Security Bypass (1.24.0)
-
CWE-287
High
Craft CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-27129)
CVE-2026-27129
CWE-918
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-26311)
CVE-2026-26311
CWE-416
Medium
Apache HTTP Server Other Vulnerability (CVE-2026-33523)
CVE-2026-33523
-
Medium
Squid Out-of-bounds Read Vulnerability (CVE-2026-33515)
CVE-2026-33515
CWE-125
Medium
osTicket Observable Discrepancy Vulnerability (CVE-2026-26895)
CVE-2026-26895
CWE-203
Medium
Envoy Proxy Off-by-one Error Vulnerability (CVE-2026-26309)
CVE-2026-26309
CWE-193
Medium
Werkzeug WSGI Improper Handling of Windows Device Names Vulnerability (CVE-2026-27199)
CVE-2026-27199
CWE-67
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-27126)
CVE-2026-27126
CWE-707
Medium
Craft CMS Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-27128)
CVE-2026-27128
CWE-367
Medium
Craft CMS Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-27127)
CVE-2026-27127
CWE-367
Medium