Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
OpenVPN AS Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2020-36382)
CVE-2020-36382
CWE-754
High
WordPress Improper Input Validation Vulnerability (CVE-2018-1000773)
CVE-2018-1000773
CWE-20
High
WordPress Plugin Testimonial Multiple Vulnerabilities (2.2)
CVE-2013-5673
CWE-352
High
WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.1.5)
-
CWE-79
High
WordPress Plugin Super Refer A Friend Information Disclosure (1.0)
-
CWE-200
High
WebLogic Out-of-bounds Write Vulnerability (CVE-2020-36518)
CVE-2020-36518
CWE-787
High
WordPress Plugin Store Locator Plus for WordPress SQL Injection (3.8.6)
-
CWE-89
High
WordPress Plugin Thank You Counter Button Cross-Site Scripting (1.8.2)
-
CWE-79
High
LimeSurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000659)
CVE-2018-1000659
CWE-22
High
LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-1000658)
CVE-2018-1000658
CWE-434
High
Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2018-1000424)
CVE-2018-1000424
CWE-522
High
Jboss EAP XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2018-1000632)
CVE-2018-1000632
CWE-91
High
Artifactory Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000623)
CVE-2018-1000623
CWE-22
High
WebERP Files or Directories Accessible to External Parties Vulnerability (CVE-2020-37082)
CVE-2020-37082
CWE-552
High
MyBB Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2018-1000502)
CVE-2018-1000502
CWE-829
High
WordPress Plugin StatPress Multiple Unspecified Vulnerabilities (1.4.1)
-
-
High
WordPress Plugin The Guardian News Feed Cross-Site Request Forgery (0.4)
-
CWE-352
High
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000863)
CVE-2018-1000863
CWE-22
High
WordPress Plugin User Photo Cross-Site Scripting (0.9.5.1)
CVE-2012-2920
CWE-79
High
WordPress Plugin All-in-One Custom Backgrounds Lite Unspecified Vulnerability (2.0.2)
-
-
High
WordPress Plugin AmazonFeed Cross-Site Scripting (2.1)
-
CWE-79
High
WordPress Plugin Vitamin Multiple Arbitrary File Disclosure Vulnerabilities (1.0.0)
CVE-2012-6651
CWE-22
High
Drupal Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2020-36193)
CVE-2020-36193
CWE-59
High
WordPress Plugin Video Embed & Thumbnail Generator Information Disclosure (1.1)
CVE-2012-1786
CWE-200
High
WordPress Plugin Users Ultra SQL Injection (1.4.35)
-
CWE-89
High
WordPress Plugin User Self Delete SQL Injection (1.1)
-
CWE-89
High
WordPress Plugin All In One Schema.org Rich Snippets Cross-Site Scripting (1.4.4)
-
CWE-79
High
WordPress Plugin Theme Blvd Layout Builder Multiple Security Bypass Vulnerabilities (2.0.1)
-
CWE-264
High
WordPress Plugin underConstruction Cross-Site Request Forgery (1.08)
CVE-2013-2699
CWE-352
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Request Forgery (1.9.2)
-
CWE-352
High
WordPress Plugin ThinkIT WP Contact Form Multiple Vulnerabilities (0.2)
-
CWE-352
High
WordPress Plugin Theme Blvd Widget Areas Multiple Security Bypass Vulnerabilities (1.2.2)
-
CWE-264
High
WordPress Plugin Theme Blvd Sliders Multiple Security Bypass Vulnerabilities (1.2.3)
-
CWE-264
High
WordPress Plugin Amazon Tools Cross-Site Scripting (1.7.2)
-
CWE-79
High
WordPress Plugin Theme Blvd Shortcodes Multiple Security Bypass Vulnerabilities (1.5.2)
-
CWE-264
High
WordPress Plugin Agent Storm by StormRETS Multiple Cross-Site Scripting Vulnerabilities (1.1.35)
-
CWE-79
High
WordPress Plugin WordPress Photo Gallery by Gallery Bank SQL Injection (3.0.101)
-
CWE-89
High
WordPress Plugin WPshop-eCommerce Arbitrary File Upload (1.3.9.5)
-
CWE-434
High
WordPress Plugin WP Print Friendly Security Bypass (0.5.2)
-
CWE-264
High
WordPress Plugin AccessPress Social Icons Multiple SQL Injection Vulnerabilities (1.6.6)
-
CWE-89
High
PHP Out-of-bounds Read Vulnerability (CVE-2018-10549)
CVE-2018-10549
CWE-125
High
PHP NULL Pointer Dereference Vulnerability (CVE-2018-10548)
CVE-2018-10548
CWE-476
High
WordPress Plugin Spiffy XSPF Player SQL Injection (0.1)
CVE-2013-3530
CWE-89
High
WordPress Plugin SS Quiz Multiple Unspecified Vulnerabilities (1.12)
-
-
High
WordPress Plugin Active Directory Authentication Integration Cross-Site Scripting (0.6)
-
CWE-79
High
PHP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-10546)
CVE-2018-10546
CWE-835
High
WebLogic CVE-2020-2867 Vulnerability (CVE-2020-2867)
CVE-2020-2867
-
High
WordPress Plugin WP-Print Cross-Site Request Forgery (2.51)
CVE-2013-2693
CWE-352
High
WordPress Plugin WP-PostViews Cross-Site Request Forgery (1.62)
CVE-2013-3252
CWE-352
High
WordPress Plugin WP-Polls SQL Injection (2.61)
-
CWE-89
High
WordPress Plugin WP PHP widget Information Disclosure (1.0.2)
CVE-2013-0721
CWE-200
High
WordPress Plugin WP Photo Album Plus Cross-Site Scripting (4.9.2)
-
CWE-79
High
WordPress Plugin WP Photo Album Plus Cross-Site Scripting (5.0.2)
CVE-2013-3254
CWE-79
High
WordPress Plugin WP Media Cleaner Multiple Cross-Site Scripting Vulnerabilities (2.2.6)
CVE-2015-2195
CWE-79
High
WordPress Plugin WP-reCAPTCHA Cross-Site Scripting (3.1.3)
-
CWE-79
High
WordPress Plugin WP-RecentComments SQL Injection (2.0.7)
CVE-2012-1067
CWE-89
High
WordPress Plugin StatPress Cross-Site Scripting (1.2.9.1)
-
CWE-79
High
Oracle JRE CVE-2020-2805 Vulnerability (CVE-2020-2805)
CVE-2020-2805
-
High
WordPress Plugin WPML (WordPress Multilingual) Multiple Vulnerabilities (3.1.8.6)
CVE-2015-2792
CWE-284
High
WebLogic CVE-2020-2798 Vulnerability (CVE-2020-2798)
CVE-2020-2798
-
High
WordPress Plugin WP125 Multiple Cross-Site Scripting Vulnerabilities (1.4.4)
-
CWE-79
High
WordPress Plugin Spider Calendar Cross-Site Scripting (1.1.0)
-
CWE-79
High
Oracle JRE CVE-2020-2803 Vulnerability (CVE-2020-2803)
CVE-2020-2803
-
High
WordPress Plugin SpiderCatalog Unspecified Vulnerability (1.6.8)
-
-
High
WordPress Plugin WP125 Cross-Site Request Forgery (1.4.9)
CVE-2013-2700
CWE-352
High
WordPress Plugin WP Symposium Open Redirect (13.04)
CVE-2013-2694
CWE-601
High
WordPress Plugin WP Simple Login Registration Cross-Site Scripting (1.0.2)
-
CWE-79
High
WordPress Plugin WP Symposium Cross-Site Scripting (13.02)
CVE-2013-2695
CWE-79
High
WordPress Plugin wp superb Slideshow Information Disclosure (2.4)
-
CWE-200
High
WordPress Plugin WP Super Cache Cross-Site Scripting (1.4)
-
CWE-79
High
Oracle JRE CVE-2020-2816 Vulnerability (CVE-2020-2816)
CVE-2020-2816
-
High
Liferay Portal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-10795)
CVE-2018-10795
CWE-434
High
WebLogic CVE-2020-2828 Vulnerability (CVE-2020-2828)
CVE-2020-2828
-
High
WordPress Plugin WP Super Cache Cross-Site Scripting (1.3)
-
CWE-79
High
WordPress Plugin WP Marketplace-Complete Shopping Cart/eCommerce Solution Arbitrary File Upload (1.2.1)
-
CWE-434
High