Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
Joomla! Core 3.x.x Security Bypass (3.0.0 - 3.4.4)
CVE-2015-7899
CWE-264
High
WordPress Plugin Duplicate Post Multiple Vulnerabilities (2.5)
-
CWE-89
High
WordPress Plugin DukaPress Directory Traversal (2.5.2)
CVE-2014-8799
CWE-22
High
WordPress Plugin Disable Comments Cross-Site Request Forgery (1.0.3)
CVE-2014-2550
CWE-352
High
WordPress Plugin Custom Contact Forms Security Bypass (5.1.0.3)
-
CWE-264
High
WordPress Plugin Custom Banners Cross-Site Scripting (1.2.2.2)
CVE-2014-4724
CWE-79
High
WordPress Plugin CopySafe PDF Protection Arbitrary File Upload (0.6)
-
CWE-434
High
WordPress Plugin Contact Form Email Cross-Site Scripting (1.0)
CVE-2014-8798
CWE-79
High
Magento CVE-2021-36021 Vulnerability (CVE-2021-36021)
CVE-2021-36021
-
High
WebLogic CVE-2021-2157 Vulnerability (CVE-2021-2157)
CVE-2021-2157
-
High
WordPress Plugin Relevanssi-A Better Search Cross-Site Scripting (3.3.7.1)
CVE-2014-9443
CWE-79
High
Apache Tomcat Deserialization of Untrusted Data Vulnerability (CVE-2020-9484)
CVE-2020-9484
CWE-502
High
Joomla! Core 3.x.x Cross-Site Scripting (3.2.0 - 3.9.3)
CVE-2019-9712
CWE-79
High
WordPress Plugin WordPress Alipay/Tenpay/PayPal Cross-Site Scripting (3.6.0)
CVE-2014-4514
CWE-79
High
WordPress Plugin WooCommerce Cross-Site Scripting (2.0.17)
-
CWE-79
High
WordPress Plugin WooCommerce Cross-Site Scripting (2.2.10)
CVE-2015-2069
CWE-79
High
WordPress Plugin Votecount for Balatarin Cross-Site Scripting (0.1.1)
CVE-2014-4572
CWE-79
High
WordPress Plugin Video Metabox Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin verwei.se-WordPress-Twitter Cross-Site Scripting (1.0.2)
CVE-2014-4566
CWE-79
High
Jenkins Session Fixation Vulnerability (CVE-2021-21671)
CVE-2021-21671
CWE-384
High
WordPress Plugin Validated Cross-Site Scripting (1.0.2)
CVE-2014-4564
CWE-79
High
WordPress Plugin URL Cloak & Encrypt Cross-Site Scripting (2.0)
CVE-2014-4563
CWE-79
High
Jenkins Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-21686)
CVE-2021-21686
CWE-59
High
WordPress Plugin WordPress Social Login Cross-Site Scripting (2.0.3)
CVE-2014-4576
CWE-79
High
Joomla! Core 3.x.x Cross-Site Request Forgery (3.2.0 - 3.9.12)
CVE-2019-18650
CWE-352
High
Jenkins Missing Authorization Vulnerability (CVE-2021-21688)
CVE-2021-21688
CWE-862
High
Joomla! Core 3.9.x Remote Code Execution (3.9.7 - 3.9.8)
CVE-2019-14654
CWE-94
High
Joomla! Core 3.9.x Directory Traversal (3.9.3 - 3.9.5)
CVE-2019-11831
CWE-22
High
Joomla! Core 3.9.x CSV Injection (3.9.0 - 3.9.6)
CVE-2019-12765
CWE-20
High
Joomla! Core Security Bypass (2.5.0 - 3.8.7)
CVE-2018-11323
CWE-264
High
Joomla! Core Security Bypass (1.5.0 - 3.8.12)
CVE-2018-17855
CWE-264
High
Joomla! Core PHP Object Injection (2.5.4 - 3.8.12)
CVE-2018-17856
CWE-915
High
Joomla! Core Multiple Vulnerabilities (1.5.0 - 3.8.11)
CVE-2018-15882
CWE-434
High
Joomla! Core Multiple Vulnerabilities (2.5.0 - 3.8.12)
CVE-2018-17859
CWE-352
High
WordPress Plugin WordPress Facebook Multiple Cross-Site Scripting Vulnerabilities (1.0.10)
CVE-2015-1582
CWE-79
High
WordPress Plugin WordPress Survey & Poll-Quiz, Survey and Poll SQL Injection (1.1.91)
CVE-2015-2090
CWE-89
High
Joomla! Core Multiple Cross-Site Scripting Vulnerabilities (1.5.0 - 3.8.7)
CVE-2018-6378
CWE-79
High
TYPO3 Uncontrolled Recursion Vulnerability (CVE-2021-21359)
CVE-2021-21359
CWE-674
High
Joomla! Core 3.x.x Information Disclosure (3.6.0 - 3.9.12)
CVE-2019-18674
CWE-200
High
WordPress Plugin WP Silverlight Media Player Cross-Site Scripting (0.8)
CVE-2014-4589
CWE-79
High
WordPress Plugin WP Rss Poster SQL Injection (1.0.0)
CVE-2014-4938
CWE-89
High
TYPO3 Cleartext Storage of Sensitive Information Vulnerability (CVE-2021-21339)
CVE-2021-21339
CWE-312
High
WordPress Plugin WP-Property-WordPress Powered Real Estate and Property Management SQL Injection (1.36.0)
-
CWE-89
High
Joomla! Core 3.x.x Cross-Site Scripting (3.6.0 - 3.9.6)
CVE-2019-12766
CWE-79
High
Joomla! Core 3.x.x Cross-Site Scripting (3.0.0 - 3.9.11)
CVE-2019-16725
CWE-79
High
TYPO3 Files or Directories Accessible to External Parties Vulnerability (CVE-2021-21355)
CVE-2021-21355
CWE-552
High
TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21357)
CVE-2021-21357
CWE-434
High
WordPress Plugin WP Plugin Manager (WPPM) Cross-Site Scripting (1.6.4.b)
CVE-2014-4593
CWE-79
High
WordPress Plugin WP Planet Cross-Site Scripting (0.1)
CVE-2014-4592
CWE-79
High
WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.7)
CVE-2015-2065
CWE-89
High
WordPress Plugin WP eCommerce Multiple Vulnerabilities (3.9.1)
-
CWE-352
High
Envoy Proxy Improper Authentication Vulnerability (CVE-2021-21378)
CVE-2021-21378
CWE-287
High
WordPress Plugin wp-easybooking Cross-Site Scripting (1.0.3)
CVE-2014-4584
CWE-79
High
XWiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-21380)
CVE-2021-21380
CWE-138
High
WordPress Plugin WP Easy Post Types Cross-Site Scripting (1.4.3)
CVE-2014-4524
CWE-79
High
Ampache Improper Access Control Vulnerability (CVE-2021-21399)
CVE-2021-21399
CWE-284
High
WordPress Plugin WP-Contact Multiple Cross-Site Scripting Vulnerabilities (1.0)
CVE-2014-4583
CWE-79
High
WordPress Plugin WP-Business Directory (wp-ttisbdir) Multiple Cross-Site Scripting Vulnerabilities (1.0.2)
CVE-2014-4599
CWE-79
High
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2021-21604)
CVE-2021-21604
CWE-502
High
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-21605)
CVE-2021-21605
CWE-22
High
Jenkins Missing Authorization Vulnerability (CVE-2021-21695)
CVE-2021-21695
CWE-862
High
Joomla! Core Local File Inclusion (2.5.0 - 3.8.8)
CVE-2018-12712
CWE-22
High
WordPress Plugin WP Ultimate Email Marketer Multiple Vulnerabilities (1.1.0)
CVE-2014-4600
CWE-264
High
WordPress Plugin Rockhoist Ratings SQL Injection (1.2.1)
-
CWE-89
High
Nginx Off-by-one Error Vulnerability (CVE-2021-23017)
CVE-2021-23017
CWE-193
High
Open Resty Off-by-one Error Vulnerability (CVE-2021-23017)
CVE-2021-23017
CWE-193
High
WordPress Plugin Slider Revolution Responsive Local File Inclusion (4.1.4)
-
CWE-22
High
WordPress Plugin Simple Retail Menus SQL Injection (4.0.1)
CVE-2014-5183
CWE-89
High
WordPress Plugin Shortcode Ninja Cross-Site Scripting (1.4)
CVE-2014-4550
CWE-79
High
WordPress Plugin Secure HTML5 Video Player Cross-Site Scripting (3.3)
-
CWE-79
High
Joomla! Core 3.x.x Security Bypass (3.1.0 - 3.8.12)
CVE-2018-17857
CWE-264
High
Joomla! Core 3.x.x Security Bypass (3.7.0 - 3.8.11)
CVE-2018-15881
CWE-264
High
WordPress Plugin Royal Gallery Cross-Site Scripting (2.0)
-
CWE-79
High
Joomla Improper Input Validation Vulnerability (CVE-2021-23131)
CVE-2021-23131
CWE-20
High
ReviveAdserver Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-22948)
CVE-2021-22948
CWE-327
High