🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Missing Update
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Missing Update
This page lists
23765 vulnerabilities
in this category.
Critical: 1566
High: 12713
Medium: 8693
Low: 789
Information: 4
Vulnerability Name
CVE
CWE
Severity
MediaWiki Insufficiently Protected Credentials Vulnerability (CVE-2020-35623)
CVE-2020-35623
CWE-522
High
WordPress Plugin Another WordPress Classifieds Multiple Vulnerabilities (2.2.1)
CVE-2014-10013
CWE-89
High
WordPress Plugin Another WordPress Classifieds Unspecified Vulnerability (1.8.9.4)
CVE-2012-4874
-
High
WordPress Plugin WordPress Backup to Dropbox Cross-Site Scripting (4.0)
CVE-2014-9310
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Information Disclosure (2.2.5.1)
CVE-2015-0902
CWE-200
High
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.10.5)
-
CWE-79
High
WordPress Plugin The Guardian News Feed Cross-Site Request Forgery (0.4)
-
CWE-352
High
Joomla CVE-2020-35610 Vulnerability (CVE-2020-35610)
CVE-2020-35610
-
High
Sqlite NULL Pointer Dereference Vulnerability (CVE-2020-35525)
CVE-2020-35525
CWE-476
High
Joomla! Core 3.x.x SQL Injection (3.0.0 - 3.9.22)
CVE-2020-35613
CWE-89
High
WordPress Plugin Contact Form Builder-a plugin for creating contact and feedback forms Security Bypass (1.0.7)
-
CWE-264
High
WordPress Plugin Community Events SQL Injection (1.3.5)
CVE-2015-3313
CWE-89
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Request Forgery (3.8.9)
CVE-2015-0895
CWE-352
High
Joomla! Core 3.x.x Security Bypass (3.0.0 - 3.9.24)
CVE-2021-26027
CWE-264
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Scripting (3.9.4)
-
CWE-79
High
MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-35625)
CVE-2020-35625
CWE-732
High
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-35611)
CVE-2020-35611
CWE-200
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall SQL Injection (3.8.7)
CVE-2015-0894
CWE-89
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall SQL Injection (3.9.0)
-
CWE-89
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.2.6.1)
-
CWE-79
High
Joomla Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-35612)
CVE-2020-35612
CWE-22
High
WordPress Plugin Thank You Counter Button Cross-Site Scripting (1.8.2)
-
CWE-79
High
Joomla! Core 3.x.x Security Bypass (3.2.0 - 3.9.24)
CVE-2021-23128
CWE-264
High
WordPress Plugin Theme Blvd Layout Builder Multiple Security Bypass Vulnerabilities (2.0.1)
-
CWE-264
High
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-35626)
CVE-2020-35626
CWE-352
High
Drupal Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2020-36193)
CVE-2020-36193
CWE-59
High
WordPress Ultimate Member Plugin Improper Privilege Management Vulnerability (CVE-2020-36156)
CVE-2020-36156
CWE-269
High
WordPress Plugin Theme Blvd Widget Areas Multiple Security Bypass Vulnerabilities (1.2.2)
-
CWE-264
High
Joomla! Core 3.x.x Local File Inclusion (3.0.0 - 3.9.25)
CVE-2021-26031
CWE-22
High
WordPress Plugin Bilingual Linker Cross-Site Scripting (2.1.1)
-
CWE-79
High
WordPress Plugin Vitamin Multiple Arbitrary File Disclosure Vulnerabilities (1.0.0)
CVE-2012-6651
CWE-22
High
WordPress Plugin ThinkIT WP Contact Form Multiple Vulnerabilities (0.2)
-
CWE-352
High
WordPress Plugin Video Embed & Thumbnail Generator Information Disclosure (1.1)
CVE-2012-1786
CWE-200
High
Zenphoto Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-36079)
CVE-2020-36079
CWE-434
High
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.10.4)
-
CWE-79
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Request Forgery (1.9.2)
-
CWE-352
High
WordPress Plugin Users Ultra SQL Injection (1.4.35)
-
CWE-89
High
WordPress Plugin BuddyDrive Cross-Site Scripting (1.2.2)
-
CWE-79
High
WordPress Plugin User Self Delete SQL Injection (1.1)
-
CWE-89
High
WordPress Plugin underConstruction Cross-Site Request Forgery (1.08)
CVE-2013-2699
CWE-352
High
Joomla! Core 3.x.x Security Bypass (3.0.0 - 3.9.23)
CVE-2021-23123
CWE-264
High
WordPress Plugin vSlider Multi Image Slider for WordPress Arbitrary File Upload (4.1.2)
-
CWE-434
High
WordPress Plugin Citizen Space Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Cart66 Pro Arbitrary File Disclosure (1.5.3)
CVE-2014-9461
CWE-22
High
WordPress Plugin User Photo Cross-Site Scripting (0.9.5.1)
CVE-2012-2920
CWE-79
High
phpList Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-35708)
CVE-2020-35708
CWE-138
High
WordPress Plugin WordPress-Amazon-Associate (WPAA) Cross-Site Scripting (2.0)
-
CWE-79
High
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (3.8.1)
-
CWE-79
High
WordPress Plugin WooCommerce Predictive Search Cross-Site Scripting (1.0.5)
-
CWE-79
High
WordPress Plugin WooCommerce Multiple Vulnerabilities (2.3.5)
CVE-2015-2329
CWE-89
High
WordPress Plugin AppPresser-Mobile App Framework Cross-Site Scripting (1.1.4)
-
CWE-79
High
WordPress Plugin WassUp Real Time Analytics Cross-Site Scripting (1.8.3)
CVE-2012-2633
CWE-79
High
WordPress Plugin Theme Blvd Shortcodes Multiple Security Bypass Vulnerabilities (1.5.2)
-
CWE-264
High
WordPress Plugin Captcha by BestWebSoft Security Bypass (4.0.6)
CVE-2014-9283
CWE-254
High
WordPress Plugin Web Forms for Vtiger wordpress Lead capture and Contacts Sync Unspecified Vulnerability (1.0.0)
-
-
High
WordPress Plugin Theme Blvd Sliders Multiple Security Bypass Vulnerabilities (1.2.3)
-
CWE-264
High
WordPress Plugin BuddyPress Cross-Site Scripting (2.2.2.1)
-
CWE-79
High
Joomla! Core Cross-Site Scripting (2.5.0 - 3.9.24)
CVE-2021-23129
CWE-79
High
WordPress Plugin bbPress Cross-Site Scripting (2.5.6)
-
CWE-79
High
WordPress Plugin WordPress Poll Multiple SQL Injection Vulnerabilities (33.5)
-
CWE-89
High
WordPress Plugin WordPress Landing Pages SQL Injection (1.2.1)
CVE-2013-6243
CWE-89
High
WordPress Plugin WordPress Simple Shopping Cart Cross-Site Request Forgery (3.5)
CVE-2013-2705
CWE-352
High
WordPress Plugin WP e-Commerce Shop Styling Remote File Inclusion (1.7.2)
CVE-2013-0724
CWE-94
High
WordPress Plugin WP e-Commerce Predictive Search Cross-Site Scripting (1.1.1)
-
CWE-79
High
WebLogic CVE-2020-2828 Vulnerability (CVE-2020-2828)
CVE-2020-2828
-
High
WordPress Plugin WP-DownloadManager Cross-Site Request Forgery (1.60)
CVE-2013-2697
CWE-352
High
WordPress Plugin WordPress Video Player Multiple Vulnerabilities (1.5.4)
-
CWE-352
High
WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.0)
CVE-2013-3478
CWE-89
High
WebLogic CVE-2020-2963 Vulnerability (CVE-2020-2963)
CVE-2020-2963
-
High
Oracle JRE CVE-2020-2816 Vulnerability (CVE-2020-2816)
CVE-2020-2816
-
High
WordPress Plugin WP-Forum SQL Injection (2.4)
-
CWE-89
High
WordPress Plugin WP Super Cache Cross-Site Scripting (1.4)
-
CWE-79
High
WordPress Plugin wp superb Slideshow Information Disclosure (2.4)
-
CWE-200
High
WordPress Plugin WP Symposium Cross-Site Scripting (13.02)
CVE-2013-2695
CWE-79
High
WordPress Plugin WP Symposium Open Redirect (13.04)
CVE-2013-2694
CWE-601
High
«
1
...
21
22
23
...
317
»