Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Fast Secure Contact Form Remote Code Execution (4.0.44)
CVE-2016-10045
CWE-94
High
WordPress Plugin User Meta Manager Information Disclosure (3.4.7)
-
CWE-200
High
WordPress Plugin Use Any Font Unspecified Vulnerability (4.3.6)
-
-
High
WordPress Plugin Universal Analytics Cross-Site Scripting (1.3.0)
-
CWE-79
High
WordPress Plugin Ultimate Tag Cloud Widget Unspecified Vulnerability (2.3)
-
-
High
WordPress Plugin Transposh WordPress Translation Cross-Site Scripting (0.8.3)
-
CWE-79
High
WordPress Plugin Titan Anti-spam & Security Cross-Site Scripting (4.1)
-
CWE-79
High
PrestaShop Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-20717)
CVE-2018-20717
CWE-94
High
WordPress Plugin FormBuilder Multiple Vulnerabilities (1.05)
-
CWE-352
High
WordPress Plugin User Submitted Posts Cross-Site Scripting (20151113)
-
CWE-79
High
WordPress Plugin FPW Category Thumbnails Multiple Unspecified Vulnerabilities (1.6.7)
-
-
High
Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2018-20506)
CVE-2018-20506
CWE-190
High
Sqlite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-20505)
CVE-2018-20505
CWE-138
High
Craft CMS Missing Encryption of Sensitive Data Vulnerability (CVE-2018-20465)
CVE-2018-20465
CWE-311
High
WordPress Plugin Google Forms PHP Object Injection (0.87)
-
CWE-915
High
WordPress Plugin Google Map Remote Code Execution (1.0)
-
CWE-94
High
Python Integer Overflow or Wraparound Vulnerability (CVE-2018-20406)
CVE-2018-20406
CWE-190
High
Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2018-20346)
CVE-2018-20346
CWE-190
High
WordPress Plugin User Meta Manager Multiple Vulnerabilities (3.4.6)
-
CWE-264
High
WordPress Plugin Velvet Blues Update URLs Unspecified Vulnerability (2.1)
-
-
High
WordPress Plugin WordPress Popular Posts Cross-Site Scripting (3.3.2)
-
CWE-79
High
WordPress Plugin WooCommerce Checkout Manager Multiple Unspecified Vulnerabilities (3.6.9)
-
-
High
WordPress Plugin WordPress Backup and Migrate-Backup Guard Arbitrary File Upload (1.0.2)
-
CWE-434
High
WordPress Plugin WooSidebars Cross-Site Scripting (1.4.1)
-
CWE-79
High
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.1.5.1)
-
CWE-79
High
WordPress Plugin WooCommerce-Store Toolkit Privilege Escalation (1.5.6)
-
CWE-264
High
MySQL CVE-2019-2632 Vulnerability (CVE-2019-2632)
CVE-2019-2632
-
High
WordPress Plugin WooCommerce-Store Toolkit Privilege Escalation (1.5.7)
-
CWE-264
High
WordPress Plugin WooCommerce-Store Exporter Privilege Escalation (1.8.3)
CVE-2016-10935
CWE-264
High
WordPress Plugin WooCommerce Multilingual-run WooCommerce with WPML Multiple Unspecified Vulnerabilities (3.5.4)
-
-
High
WordPress Plugin Direct Download for Woocommerce Arbitrary File Download (1.15)
-
CWE-538
High
WordPress Plugin Facebook Like Box Unspecified Vulnerability (1.0.17)
-
-
High
WebLogic CVE-2019-2647 Vulnerability (CVE-2019-2647)
CVE-2019-2647
-
High
WebLogic CVE-2019-2648 Vulnerability (CVE-2019-2648)
CVE-2019-2648
-
High
WordPress Plugin DOP Slider Arbitrary File Upload (1.0)
-
CWE-434
High
WebLogic CVE-2019-2649 Vulnerability (CVE-2019-2649)
CVE-2019-2649
-
High
WebLogic CVE-2019-2650 Vulnerability (CVE-2019-2650)
CVE-2019-2650
-
High
WordPress Plugin Event Notifier Cross-Site Scripting (1.2.0)
-
CWE-79
High
WordPress Plugin Virtue/Pinnacle ToolKit Unspecified Vulnerability (2.5)
-
-
High
WordPress Plugin Viper's Video Quicktags Unspecified Vulnerability (6.4.4)
-
-
High
WordPress Plugin Disable Feeds Unspecified Vulnerability (1.4)
-
-
High
Oracle Database Server CVE-2019-2518 Vulnerability (CVE-2019-2518)
CVE-2019-2518
-
High
WordPress Plugin The Events Calendar Security Bypass (3.11.2)
-
CWE-264
High
Cherokee Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-20799)
CVE-2019-20799
CWE-119
High
WordPress Plugin WordPress Landing Pages Unspecified Vulnerability (2.0.2)
-
-
High
WordPress Plugin Video Gallery /w YouTube, Vimeo Multiple Vulnerabilities (8.80)
-
CWE-352
High
WordPress Plugin VaultPress Cross-Site Scripting (1.7.7)
-
CWE-79
High
Atlassian Jira Uncontrolled Search Path Element Vulnerability (CVE-2019-20419)
CVE-2019-20419
CWE-427
High
WordPress Plugin Arigato Autoresponder and Newsletter Multiple Unspecified Vulnerabilities (2.4.2)
-
-
High
Cherokee Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20798)
CVE-2019-20798
CWE-707
High
WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Directory Traversal (3.1.4)
-
CWE-22
High
WordPress Plugin Stealth Login Page Unspecified Vulnerability (1.1.3)
-
-
High
WordPress Plugin WP Advanced Comment Cross-Site Scripting (0.10)
-
CWE-79
High
Atlassian Jira CVE-2019-20898 Vulnerability (CVE-2019-20898)
CVE-2019-20898
-
High
WordPress Plugin SSL Insecure Content Fixer Information Disclosure (2.0.0)
-
CWE-200
High
WordPress Plugin SP Project & Document Manager Multiple Vulnerabilities (2.5.9.7)
-
CWE-434
High
WordPress Plugin Soundy Background Music Cross-Site Scripting (3.1)
-
CWE-79
High
Python Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-20907)
CVE-2019-20907
CWE-835
High
Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-20920)
CVE-2019-20920
CWE-94
High
WordPress Plugin Social Share Icons & Social Share Buttons Unspecified Vulnerability (1.4)
-
-
High
Handlebars Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-20922)
CVE-2019-20922
CWE-835
High
WordPress Plugin WordPress Popups for Marketing and Email Newsletters, Lead Generation and Conversions by OptinMonster Security Bypass (1.1.4.5)
-
CWE-264
High
WordPress Plugin ABASE Multiple Vulnerabilities (2.6)
-
CWE-352
High
WordPress Plugin Slideshow Gallery LITE Cross-Site Scripting (1.5.3.4)
-
CWE-79
High
WordPress Plugin Adavnced Video embed Local File Inclusion (1.0)
-
CWE-22
High
WordPress Plugin CloudFlare Multiple Cross-Site Scripting Vulnerabilities (1.3.20)
-
CWE-79
High
MySQL CVE-2018-2562 Vulnerability (CVE-2018-2562)
CVE-2018-2562
-
High
WordPress Plugin Claptastic Clap! Button Multiple Cross-Site Scripting Vulnerabilities (1.3)
-
CWE-79
High
Atlassian Jira Uncontrolled Search Path Element Vulnerability (CVE-2019-20400)
CVE-2019-20400
CWE-427
High
WordPress Plugin ZX_CSV Upload Multiple Vulnerabilities (1)
-
CWE-352
High
WordPress Plugin Anti Plagiarism Cross-Site Scripting (3.60)
CVE-2016-1000128
CWE-79
High
WordPress Plugin AJAX Random Post Cross-Site Scripting (2.00)
CVE-2016-1000127
CWE-79
High
WordPress Plugin Admin Font Editor Cross-Site Scripting (1.8)
CVE-2016-1000126
CWE-79
High
WordPress Plugin Zedna eBook download Directory Traversal (1.1)
CVE-2016-10924
CWE-22
High
Atlassian Jira CVE-2019-20413 Vulnerability (CVE-2019-20413)
CVE-2019-20413
-
High