Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Vulnerabilities (2.9.42)
CVE-2016-1209
CWE-915
High
WordPress Plugin Nelio AB Testing Directory Traversal (4.4.4)
-
CWE-22
High
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-16869)
CVE-2019-16869
CWE-444
High
Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2019-16891)
CVE-2019-16891
CWE-502
High
WordPress Plugin MainWP Dashboard Cross-Site Scripting (3.1.2)
-
CWE-79
High
WordPress Plugin Church Admin Arbitrary File Upload (4.4.6)
CVE-2024-37418
CWE-434
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17294)
CVE-2019-17294
CWE-138
High
WordPress Plugin Cookie Consent for WP-Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) Cross-Site Scripting (3.2.0)
CVE-2024-4869
CWE-79
High
WordPress Plugin Cookie Consent for WP-Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) CSV Injection (2.2.5)
CVE-2023-23678
CWE-1236
High
WordPress Plugin Cookie Consent for WP-Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) Security Bypass (3.0.2)
CVE-2024-3599
CWE-862
High
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-16993)
CVE-2019-16993
CWE-352
High
WordPress Plugin Default Thumbnail Plus Arbitrary File Upload (1.0.2.3)
CVE-2024-6161
CWE-434
High
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (4.0.2)
-
CWE-79
High
OpenSSL Cryptographic Issues Vulnerability (CVE-2000-1254)
CVE-2000-1254
-
High
Oracle Application Server Other Vulnerability (CVE-2000-1236)
CVE-2000-1236
-
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17292)
CVE-2019-17292
CWE-138
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17293)
CVE-2019-17293
CWE-138
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17318)
CVE-2019-17318
CWE-138
High
WebLogic Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-17359)
CVE-2019-17359
CWE-770
High
WordPress Plugin WP Fastest Cache Multiple Vulnerabilities (0.8.5.7)
-
CWE-264
High
Internet Information Services Other Vulnerability (CVE-2000-1104)
CVE-2000-1104
-
High
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-18650)
CVE-2019-18650
CWE-352
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall SQL Injection (4.0.8)
-
CWE-89
High
Squid Out-of-bounds Write Vulnerability (CVE-2019-18676)
CVE-2019-18676
CWE-787
High
WordPress Plugin All-in-One Event Calendar Multiple Vulnerabilities (2.3.12)
-
CWE-89
High
WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (4.4.7)
-
CWE-79
High
Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-18679)
CVE-2019-18679
CWE-200
High
WordPress Plugin Acunetix Secure WordPress Cross-Site Scripting (3.0.3)
-
CWE-79
High
WordPress Plugin Wp Multiple Meta Box SQL Injection (1.0.0)
-
CWE-89
High
WordPress Plugin File Manager Advanced Shortcode Arbitrary File Upload (2.5.3)
CVE-2023-7061
CWE-434
High
Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-18836)
CVE-2019-18836
CWE-835
High
WordPress Plugin bbPress Cross-Site Scripting (2.5.8)
-
CWE-79
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2019-18838)
CVE-2019-18838
CWE-476
High
WordPress Plugin WordPress Comment Rating Cross-Site Scripting (1.5.3)
-
CWE-79
High
WordPress Plugin File Manager Advanced Shortcode Directory Traversal (2.4)
CVE-2023-7062
CWE-22
High
WordPress Plugin WHIZZ Cross-Site Scripting (1.0.7)
CVE-2016-1000154
CWE-79
High
WordPress Plugin Visual Form Builder Multiple Cross-Site Scripting Vulnerabilities (2.8.6)
-
CWE-79
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-19209)
CVE-2019-19209
CWE-138
High
WordPress Plugin Unlimited Pop-Ups Multiple Cross-Site Scripting Vulnerabilities (1.4.3)
-
CWE-79
High
WordPress Plugin Tweet Wheel Multiple Cross-Site Scripting Vulnerabilities (1.0.3.2)
-
CWE-79
High
WordPress Plugin Filter & Grids Local File Inclusion (2.8.32)
CVE-2024-6164
CWE-22
High
WordPress Plugin The Events Calendar Open Redirect (4.1.1)
-
CWE-601
High
IBMHttpServer Other Vulnerability (CVE-2000-1168)
CVE-2000-1168
-
High
WordPress Plugin BulletProof Security Cross-Site Scripting (.53.3)
-
CWE-79
High
WordPress Plugin Digital River Global Commerce Supply Chain Attack [Polyfill.io] (2.0.2)
-
CWE-1372
High
WordPress Plugin Event post Local File Inclusion (5.9.5)
CVE-2024-38735
CWE-22
High
WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (5.3.4)
-
CWE-79
High
Python CVE-2019-17514 Vulnerability (CVE-2019-17514)
CVE-2019-17514
-
High
WordPress Plugin DirectoryPress-Business Directory And Classified Ad Listing SQL Injection (3.6.10)
CVE-2024-38755
CWE-89
High
Zope Web Application Server Other Vulnerability (CVE-2000-1211)
CVE-2000-1211
-
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.26)
CVE-2024-5703
CWE-862
High
Apache Tomcat Session Fixation Vulnerability (CVE-2019-17563)
CVE-2019-17563
CWE-384
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.25)
CVE-2024-6172
CWE-89
High
WordPress Plugin Image Gallery-Responsive Photo Gallery Multiple Unspecified Vulnerabilities (1.9.58)
-
-
High
WordPress Plugin Google Authenticator Unspecified Vulnerability (0.47)
-
-
High
WordPress Plugin Ghost Arbitrary File Download (0.5.5)
-
CWE-538
High
WordPress Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2019-17675)
CVE-2019-17675
CWE-843
High
WordPress Plugin Gallery-Video Gallery and Youtube Gallery Cross-Site Scripting (1.7.01)
-
CWE-79
High
WordPress Plugin Forget About Shortcode Buttons Cross-Site Scripting (1.1.1)
CVE-2016-1000133
CWE-79
High
Play Framework Inadequate Encryption Strength Vulnerability (CVE-2019-17598)
CVE-2019-17598
CWE-326
High
WordPress Plugin Fluid Responsive Slideshow Multiple Vulnerabilities (2.2.6)
CVE-2016-10975
CWE-352
High
WordPress Plugin Events Calendar for Google Local File Inclusion (2.1.0)
CVE-2024-38716
CWE-22
High
WordPress Plugin ExS Widgets Local File Inclusion (0.3.1)
CVE-2024-38715
CWE-22
High
WordPress Plugin Event Registration Multiple Vulnerabilities (6.02.03)
-
CWE-89
High
WordPress Plugin Comments-wpDiscuz Cross-Site Scripting (3.1.4)
-
CWE-79
High
WordPress CVE-2019-17673 Vulnerability (CVE-2019-17673)
CVE-2019-17673
-
High
WordPress Plugin Caldera Forms-More Than Contact Forms Information Disclosure (1.3.5.2)
-
CWE-200
High
WordPress Plugin WP Editor Arbitrary File Upload (1.2.5.3)
-
CWE-434
High
WordPress Plugin Yoast SEO Information Disclosure (3.2.4)
-
CWE-200
High
PHP Out-of-bounds Read Vulnerability (CVE-2019-19246)
CVE-2019-19246
CWE-125
High
Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-15001)
CVE-2019-15001
CWE-94
High
WordPress Plugin McAvoy Cross-Site Scripting (0.1.0)
-
CWE-79
High
WordPress Plugin MailPoet Newsletters (Previous) Multiple Unspecified Vulnerabilities (2.7.1)
-
-
High
WordPress Plugin Magic Fields Arbitrary File Upload (1.6.3.2)
-
CWE-434
High
WordPress Plugin Lingotek Translation Multiple Cross-Site Scripting Vulnerabilities (1.1.8)
-
CWE-79
High