Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Gravity Forms Directory Cross-Site Scripting (3.7.1)
-
CWE-79
High
Envoy Proxy Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-15225)
CVE-2019-15225
CWE-770
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2019-15226)
CVE-2019-15226
CWE-400
High
WordPress Plugin Centrora Security Multiple Vulnerabilities (6.5.6)
-
CWE-352
High
WordPress Plugin CYSTEME Finder, the admin files explorer Cross-Site Request Forgery (1.4)
-
CWE-352
High
Roundcube Unspesificed Vulnerability (CVE-2019-15237)
CVE-2019-15237
-
High
WordPress Plugin Levo Slideshow Multiple Vulnerabilities (2.3)
-
CWE-434
High
WordPress Plugin Lingotek Translation Multiple Cross-Site Scripting Vulnerabilities (1.1.8)
-
CWE-79
High
WordPress Plugin CYSTEME Finder, the admin files explorer Multiple Vulnerabilities (1.3)
-
CWE-538
High
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2019-14888)
CVE-2019-14888
CWE-400
High
WordPress Plugin Media Search Enhanced SQL Injection (0.6.0)
-
CWE-89
High
WordPress Plugin WordPress Infinite Scroll-Ajax Load More Local File Inclusion (2.11.1)
-
CWE-22
High
Java Unspesificed Vulnerability (CVE-2018-3149)
CVE-2018-3149
-
High
WordPress Plugin WordPress Landing Pages Cross-Site Scripting (2.2.4)
-
CWE-79
High
WordPress Plugin WP All Backup Unspecified Vulnerability (1.5)
-
-
High
WordPress Plugin WP CSV Unspecified Vulnerability (1.7.8.0)
-
-
High
WordPress Plugin WP htaccess Control Unspecified Vulnerability (2.4)
-
-
High
WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (6.2.03)
-
CWE-79
High
WordPress Plugin WP Selected Text Sharer Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Magic Fields Arbitrary File Upload (1.6.3.2)
-
CWE-434
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2019-14888)
CVE-2019-14888
CWE-400
High
WordPress Plugin Yoast SEO Cross-Site Scripting (3.4.0)
CVE-2021-24153
CWE-79
High
WordPress Plugin Zero Spam SQL Injection (2.1.2)
-
CWE-89
High
WordPress Plugin McAvoy Cross-Site Scripting (0.1.0)
-
CWE-79
High
WordPress Plugin MailPoet Newsletters (Previous) Multiple Unspecified Vulnerabilities (2.7.1)
-
-
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cross-Site Scripting (2.3.0)
-
CWE-79
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cross-Site Scripting (2.3.1)
-
CWE-79
High
WordPress Plugin Advanced ads Management by Inazo Cross-Site Scripting (1.3)
-
CWE-79
High
Nexus Repository Manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-15588)
CVE-2019-15588
CWE-138
High
WordPress Plugin GEO my WordPress Unspecified Vulnerability (2.6.1.1)
-
-
High
WordPress Plugin Community by PeepSo-Social Network, Membership, Registration, User Profiles Privilege Escalation (1.6.0)
-
CWE-264
High
WordPress Plugin File Browser, Manager, Backup (+ Database) Security Bypass (1.23)
-
CWE-287
High
WordPress Plugin WP Frontend Profile Multiple Vulnerabilities (0.2.1)
CVE-2019-15111
CWE-264
High
WordPress Plugin WP-Matomo (WP-Piwik) Cross-Site Scripting (1.0.10)
-
CWE-79
High
phpBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-16108)
CVE-2019-16108
CWE-94
High
WordPress Plugin WP-Members Membership Cross-Site Scripting (3.1.4.1)
-
CWE-79
High
WordPress Plugin 360 Product Rotation Arbitrary File Upload (1.2.4)
-
CWE-434
High
Java Unspesificed Vulnerability (CVE-2018-2964)
CVE-2018-2964
-
High
WordPress Plugin Filter Custom Fields & Taxonomies Light Unspecified Vulnerability (1.04)
-
-
High
WordPress Plugin Feed Them Social-for Twitter feed, Youtube and more Unspecified Vulnerability (1.9.3)
-
-
High
WordPress Plugin WooCommerce Product Feed for Google, Facebook, eBay and Many More Cross-Site Request Forgery (1.5.24)
-
CWE-352
High
WordPress Plugin EWWW Image Optimizer Remote Code Execution (2.8.3)
-
CWE-94
High
WordPress Plugin dsIDXpress IDX Multiple Unspecified Vulnerabilities (2.1.32)
-
-
High
LimeSurvey Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-16174)
CVE-2019-16174
CWE-611
High
WordPress Plugin Double Opt-In for Download SQL Injection (2.0.9)
-
CWE-89
High
WordPress Plugin bbPress Like Button SQL Injection (1.5)
-
CWE-89
High
WordPress Plugin DELUCKS SEO Unspecified Vulnerability (1.2.2)
-
-
High
LimeSurvey Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-16177)
CVE-2019-16177
CWE-200
High
WordPress Plugin Custom Search by BestWebSoft Unspecified Vulnerability (1.21)
-
-
High
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Cross-Site Request Forgery (2.7.2)
-
CWE-352
High
WordPress Plugin WooCommerce Product Feed for Google, Facebook, eBay and Many More Cross-Site Request Forgery (1.5.26)
-
CWE-352
High
LimeSurvey Improper Input Validation Vulnerability (CVE-2019-15640)
CVE-2019-15640
CWE-20
High
WordPress Plugin N-Media Post Front-end Form Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin GD bbPress Tools Cross-Site Scripting (1.7)
-
CWE-79
High
Varnish Cache Reachable Assertion Vulnerability (CVE-2019-15892)
CVE-2019-15892
CWE-617
High
Nexus Repository Manager CVE-2019-15893 Vulnerability (CVE-2019-15893)
CVE-2019-15893
-
High
WordPress Plugin Frontend File Manager Arbitrary File Upload (3.9)
-
CWE-434
High
WordPress Plugin Genesis Simple Defaults Arbitrary File Upload (1.0.0)
-
CWE-434
High
WordPress Plugin Import and export users and customers Multiple Vulnerabilities (1.9.4.6)
-
CWE-352
High
Python Out-of-bounds Read Vulnerability (CVE-2019-15903)
CVE-2019-15903
CWE-125
High
WordPress Plugin Members Import Cross-Site Request Forgery (1.3)
-
CWE-352
High
WordPress Plugin N-Media Website Contact Form with File Upload Arbitrary File Upload (2.1)
-
CWE-434
High
WordPress Plugin W3 Total Cache Multiple Vulnerabilities (0.9.4.1)
-
CWE-918
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (4.6.0)
-
CWE-79
High
MySQL CVE-2018-3064 Vulnerability (CVE-2018-3064)
CVE-2018-3064
-
High
Python CVE-2019-16056 Vulnerability (CVE-2019-16056)
CVE-2019-16056
-
High
WordPress Plugin Order Export & Order Import for WooCommerce Information Disclosure (1.0.8)
-
CWE-200
High
WordPress Plugin Product Addons & Fields for WooCommerce Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin Flip Slideshow Cross-Site Scripting (2.2)
-
CWE-79
High
WordPress Plugin Quotes Collection Cross-Site Scripting (2.0.5)
-
CWE-79
High
WordPress Plugin RB Agency Local File Disclosure (2.4.7)
-
CWE-22
High
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17305)
CVE-2019-17305
CWE-94
High
WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Arbitrary File Deletion (3.1.4)
-
CWE-73
High
WordPress Plugin OneLogin SAML SSO Security Bypass (2.2.0)
-
CWE-287
High
WordPress Plugin Backup & Restore Dropbox Multiple Vulnerabilities (1.4.7.5)
-
CWE-915
High