Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Default Facebook Thumbnails Multiple Vulnerabilities (0.4)
-
CWE-352
High
WordPress Plugin Hide My WP Cross-Site Scripting (4.53)
-
CWE-79
High
WordPress Plugin iframe Cross-Site Scripting (3.0)
-
CWE-79
High
WordPress Plugin Music Store Unspecified Vulnerability (1.0.20)
-
-
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-14443)
CVE-2020-14443
CWE-138
High
Moodle Incorrect Authorization Vulnerability (CVE-2020-14321)
CVE-2020-14321
CWE-863
High
Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-14322)
CVE-2020-14322
CWE-770
High
WordPress Plugin Music Store Open Redirect (1.0.14)
-
CWE-601
High
PostgreSQL Uncontrolled Search Path Element Vulnerability (CVE-2020-14349)
CVE-2020-14349
CWE-427
High
PostgreSQL Untrusted Search Path Vulnerability (CVE-2020-14350)
CVE-2020-14350
CWE-426
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2020-14384)
CVE-2020-14384
CWE-400
High
WordPress Plugin MP3-jPlayer Information Disclosure (2.3.2)
CVE-2015-1000008
CWE-200
High
WordPress Plugin Monetize Multiple Vulnerabilities (1.03)
-
CWE-352
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Unspecified Vulnerability (3.7.2)
-
-
High
WordPress Plugin Contact Form by BestWebSoft Cross-Site Scripting (4.0.1)
-
CWE-79
High
WordPress Plugin MDC Private Message Cross-Site Scripting (1.0.0)
CVE-2015-6805
CWE-79
High
WordPress Plugin MainWP Dashboard Unspecified Vulnerability (2.0.22)
-
-
High
WordPress Plugin Livefyre Comments 3 Cross-Site Scripting (4.1.4)
-
CWE-79
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-1023)
CVE-2020-1023
CWE-434
High
WordPress Plugin Job Manager Cross-Site Scripting (0.7.22)
CVE-2015-2321
CWE-79
High
WordPress Plugin Job Manager Cross-Site Scripting (0.7.24)
-
CWE-79
High
Apache Tomcat Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2020-13935)
CVE-2020-13935
CWE-835
High
WordPress Plugin Lazy SEO Arbitrary File Upload (1.3.2)
CVE-2013-5961
CWE-434
High
WebLogic Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-11987)
CVE-2020-11987
CWE-918
High
WordPress Plugin Akismet Cross-Site Scripting (3.1.4)
-
CWE-79
High
WordPress Plugin Easy2Map Multiple Vulnerabilities (1.2.9)
CVE-2015-7669
CWE-79
High
WordPress Plugin DukaPress Multiple Cross-Site Scripting Vulnerabilities (2.5.9)
-
CWE-79
High
WordPress Plugin Crony Cronjob Manager Multiple Vulnerabilities (0.4.4)
CVE-2017-14530
CWE-352
High
WordPress Plugin BulletProof Security Cross-Site Scripting (.52.4)
-
CWE-79
High
PHP NULL Pointer Dereference Vulnerability (CVE-2020-7062)
CVE-2020-7062
CWE-476
High
WordPress Plugin AlertWire Information Disclosure (1.1.1)
-
CWE-200
High
Dolibarr Incorrect Authorization Vulnerability (CVE-2020-12669)
CVE-2020-12669
CWE-863
High
WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (4.4.3)
-
CWE-79
High
Envoy Proxy Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-12604)
CVE-2020-12604
CWE-119
High
WordPress Plugin xPinner Lite Multiple Vulnerabilities (2.2)
-
CWE-352
High
Perl Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2020-12723)
CVE-2020-12723
CWE-120
High
Cherokee NULL Pointer Dereference Vulnerability (CVE-2020-12845)
CVE-2020-12845
CWE-476
High
WordPress Plugin WPML (WordPress Multilingual) Cross-Site Scripting (3.2.6)
-
CWE-79
High
WordPress Plugin WP Symposium Cross-Site Scripting (15.8.1)
CVE-2015-9414
CWE-79
High
WordPress Plugin WP Super Cache Multiple Vulnerabilities (1.4.4)
-
CWE-915
High
WordPress Plugin WP Shop Multiple Vulnerabilities (3.4.3.18)
-
CWE-352
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-12605)
CVE-2020-12605
CWE-400
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-12603)
CVE-2020-12603
CWE-400
High
WordPress Plugin WP Limit Login Attempts SQL Injection (2.0.0)
CVE-2015-6829
CWE-89
High
WordPress Plugin Favicon by RealFaviconGenerator Cross-Site Scripting (1.2.12)
-
CWE-79
High
Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-11993)
CVE-2020-11993
CWE-444
High
WordPress Plugin Auto Group Join Cross-Site Scripting (1.0)
-
CWE-79
High
Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2020-11996)
CVE-2020-11996
CWE-400
High
WordPress Plugin BP Group Documents Security Bypass (1.10)
-
CWE-264
High
WordPress Plugin Font-official webfonts plugin of Fonts For Web Directory Traversal (7.5)
CVE-2015-7683
CWE-22
High
WordPress Plugin KBoard Multiple Vulnerabilities (3.3)
-
CWE-89
High
WordPress Plugin Favicon by RealFaviconGenerator Unspecified Vulnerability (1.2.13)
-
-
High
WordPress Plugin Fast Secure Contact Form Cross-Site Scripting (4.0.35)
-
CWE-79
High
WordPress Plugin Events Made Easy Multiple Vulnerabilities (1.5.49)
-
CWE-352
High
WordPress Plugin Fast Secure Contact Form Cross-Site Scripting (4.0.37)
-
CWE-79
High
PHP Out-of-bounds Write Vulnerability (CVE-2020-7065)
CVE-2020-7065
CWE-787
High
WordPress Plugin kk Star Ratings Security Bypass (2.3.1)
-
CWE-264
High
WordPress Plugin EZ Portfolio Multiple Cross-Site Scripting Vulnerabilities (1.0.1)
-
CWE-79
High
WordPress Plugin Knews Multilingual Newsletters Cross-Site Request Forgery (1.2.5)
-
CWE-352
High
WordPress Plugin EZ Google Analytics Cross-Site Scripting (4.1.06)
-
CWE-79
High
PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-12461)
CVE-2020-12461
CWE-138
High
Grafana Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-13379)
CVE-2020-13379
CWE-918
High
WordPress Plugin wordpress vertical image slider Multiple Vulnerabilities (1.0)
-
CWE-352
High
Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-13934)
CVE-2020-13934
CWE-119
High
WordPress Plugin Contact Form Generator Multiple Cross-Site Request Forgery Vulnerabilities (2.1.86)
CVE-2015-6965
CWE-352
High
WordPress Plugin EZ SQL Reports Shortcode Widget and DB Backup Multiple Vulnerabilities (4.11.33)
-
CWE-94
High
Drupal Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-13670)
CVE-2020-13670
CWE-668
High
Drupal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-13671)
CVE-2020-13671
CWE-434
High
WordPress Plugin eShop Multiple Vulnerabilities (6.3.13)
-
CWE-352
High
WordPress Plugin Csv2WPeC Coupon Arbitrary File Upload (1.1)
CVE-2015-1000013
CWE-434
High
WordPress Plugin CP Reservation Calendar SQL Injection (1.1.6)
CVE-2015-7235
CWE-89
High
Drupal Improper Access Control Vulnerability (CVE-2020-13677)
CVE-2020-13677
CWE-284
High
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13760)
CVE-2020-13760
CWE-352
High
WordPress Plugin lasTunes Cross-Site Scripting (3.6.1)
-
CWE-79
High
WordPress Plugin Contact Form 7 Security Bypass (4.1)
-
CWE-330
High