Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23409 vulnerabilities in this category.

Critical: 1513 High: 12591 Medium: 8518 Low: 783 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin ActiveHelper LiveHelp Live Chat Multiple Cross-Site Scripting Vulnerabilities (4.5.0)
-
CWE-79
High
WordPress Plugin GNUCommerce Cross-Site Scripting (1.4.1)
-
CWE-79
High
PHP NULL Pointer Dereference Vulnerability (CVE-2018-19935)
CVE-2018-19935
CWE-476
High
PHP Deserialization of Untrusted Data Vulnerability (CVE-2018-19396)
CVE-2018-19396
CWE-502
High
WebERP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-19434)
CVE-2018-19434
CWE-138
High
WebERP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-19435)
CVE-2018-19435
CWE-138
High
WebERP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-19436)
CVE-2018-19436
CWE-138
High
Vanilla Forums Deserialization of Untrusted Data Vulnerability (CVE-2018-19499)
CVE-2018-19499
CWE-502
High
PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2018-19518)
CVE-2018-19518
CWE-707
High
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-19520)
CVE-2018-19520
CWE-94
High
WordPress Plugin ULTIMATE VIDEO GALLERY Cross-Site Scripting (1.4)
-
CWE-79
High
WordPress Plugin Translate WordPress with GTranslate Open Redirect (2.8.10)
-
CWE-601
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Multiple Unspecified Vulnerabilities (2.2.2)
-
-
High
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2018-19296)
CVE-2018-19296
CWE-502
High
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-19969)
CVE-2018-19969
CWE-352
High
WordPress Plugin Time Sheets Multiple Cross-Site Scripting Vulnerabilities (1.5.1)
-
CWE-79
High
WordPress Plugin Time Sheets Cross-Site Scripting (1.4.2)
-
CWE-79
High
WordPress Plugin Statistics Remote Code Execution (1.8)
-
CWE-94
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-19994)
CVE-2018-19994
CWE-138
High
WordPress Plugin SpamTask Arbitrary File Upload (1.3.6)
-
CWE-434
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-19998)
CVE-2018-19998
CWE-138
High
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1041)
CVE-2018-1041
CWE-835
High
WordPress Plugin Smash Balloon Social Post Feed Unspecified Vulnerability (2.4.2)
-
-
High
PHP NULL Pointer Dereference Vulnerability (CVE-2018-19395)
CVE-2018-19395
CWE-476
High
phpBB Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2018-19274)
CVE-2018-19274
CWE-915
High
WordPress Plugin ZWM Zeumic Work Management Multiple Unspecified Vulnerabilities (1.0.11)
-
-
High
WordPress Plugin WP Ad Guru Lite Cross-Site Scripting (1.6.0)
-
CWE-79
High
WordPress Plugin ZTR Zeumic Work Timer Multiple Unspecified Vulnerabilities (1.0.6)
-
-
High
WordPress Plugin XO Security Cross-Site Scripting (1.5.2)
-
CWE-79
High
WordPress Plugin WP Web Scraper Unspecified Vulnerability (2.4)
-
-
High
WordPress Plugin WP w3all phpBB Multiple Unspecified Vulnerabilities (1.6.3)
-
-
High
Jenkins Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2018-1999043)
CVE-2018-1999043
CWE-772
High
WordPress Plugin WP-UserAgent Cross-Site Scripting (1.0.5)
-
CWE-79
High
WordPress Plugin WP Simple Cart Arbitrary File Upload (1.0.15)
-
CWE-434
High
WordPress Plugin WP Mail Logging Multiple Unspecified Vulnerabilities (1.5.0)
-
-
High
WordPress Plugin WP Hide & Security Enhancer Arbitrary File Download (1.3.9.2)
-
CWE-538
High
Lighttpd Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-19052)
CVE-2018-19052
CWE-22
High
WordPress Plugin Web Tripwire Arbitrary File Upload (0.1.1)
-
CWE-434
High
PrestaShop Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-19124)
CVE-2018-19124
CWE-22
High
PrestaShop CVE-2018-19125 Vulnerability (CVE-2018-19125)
CVE-2018-19125
-
High
WordPress Plugin WordPress.com Custom CSS Cross-Site Scripting (1.5)
-
CWE-79
High
WordPress Plugin WordPress Photo Gallery by Gallery Bank Unspecified Vulnerability (3.1.26)
-
-
High
WordPress Plugin WordPress Landing Pages Unspecified Vulnerability (2.2.6)
-
-
High
WordPress Plugin WordPress Backup and Migrate-Backup Guard Multiple Unspecified Vulnerabilities (1.1.29)
-
-
High
WordPress Plugin WooCommerce Instamojo Cross-Site Scripting (0.0.6)
-
CWE-79
High
WordPress Plugin WolfNet IDX for WordPress Multiple Unspecified Vulnerabilities (1.14.7)
-
-
High
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19205)
CVE-2018-19205
CWE-200
High
Ruby on Rails Deserialization of Untrusted Data Vulnerability (CVE-2018-16476)
CVE-2018-16476
CWE-502
High
WordPress Plugin Google Analytics Dashboard Cross-Site Scripting (2.1.1)
-
CWE-79
High
WordPress Plugin Role Scoper Unspecified Vulnerability (1.4.1)
-
-
High
Phusion Passenger Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2018-12029)
CVE-2018-12029
CWE-362
High
WordPress Plugin WP Easy full backup Information Disclosure (1.4)
-
CWE-200
High
WordPress Plugin WP Content Filter Unspecified Vulnerability (2.42)
-
-
High
Apache Traffic Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-11783)
CVE-2018-11783
CWE-200
High
WordPress Plugin WoWPth Cross-Site Scripting (2.0)
-
CWE-79
High
Perl Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2018-12015)
CVE-2018-12015
CWE-59
High
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2018-12022)
CVE-2018-12022
CWE-502
High
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2018-12023)
CVE-2018-12023
CWE-502
High
Phusion Passenger Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-12027)
CVE-2018-12027
CWE-200
High
Phusion Passenger Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-12028)
CVE-2018-12028
CWE-732
High
WordPress Plugin WordPress Mobile app Builder-Convert WordPress site to native mobile apps Arbitrary File Upload (1.05)
CVE-2017-1002001
CWE-434
High
WordPress Plugin WP Job Manager Cross-Site Request Forgery (1.25.2)
-
CWE-352
High
WordPress Plugin WordPress Download Manager Cross-Site Request Forgery (2.8.99)
-
CWE-352
High
WordPress Plugin WHIZZ Cross-Site Request Forgery (1.1)
CVE-2017-8099
CWE-352
High
Jetty Session Fixation Vulnerability (CVE-2018-12538)
CVE-2018-12538
CWE-384
High
WordPress Plugin Webapp builder (Free mobile apps native iPhone iOS & Android Winphone mobile apps) Arbitrary File Upload (2.0)
CVE-2017-1002002
CWE-434
High
phpMyAdmin Improper Authentication Vulnerability (CVE-2018-12613)
CVE-2018-12613
CWE-287
High
WordPress Plugin Watu Quiz Unspecified Vulnerability (2.6)
-
-
High
WordPress Plugin Vospari Forms Cross-Site Scripting (1.3)
-
CWE-79
High
Joomla Improper Input Validation Vulnerability (CVE-2018-12712)
CVE-2018-12712
CWE-20
High
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-12895)
CVE-2018-12895
CWE-22
High
WordPress Plugin WP-Filebase Download Manager Cross-Site Scripting (3.4.4)
-
CWE-79
High
Opencart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-11494)
CVE-2018-11494
CWE-22
High
WordPress Plugin VaultPress Man-in-The-Middle (MiTM) Remote Code Execution (1.8.6)
-
CWE-94
High
WordPress Plugin A.M.Y. Cross-Site Scripting (1.3.3)
-
CWE-79
High