Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin StageShow Multiple Vulnerabilities (5.0.8)
CVE-2015-5461
CWE-601
High
WordPress Plugin Simple Image Manipulator Arbitrary File Download (1.0)
CVE-2015-1000010
CWE-538
High
WordPress Plugin Simple Ads Manager Denial of Service (2.9.3.114)
-
CWE-400
High
WordPress Plugin Recent Backups Arbitrary File Download (0.7)
CVE-2015-1000006
CWE-22
High
MySQL CVE-2020-14697 Vulnerability (CVE-2020-14697)
CVE-2020-14697
-
High
WordPress Plugin Powerplay Gallery Multiple Vulnerabilities (3.3)
CVE-2015-5682
CWE-434
High
WordPress Plugin Portfolio Cross-Site Request Forgery (1.0)
CVE-2015-6523
CWE-352
High
WordPress Plugin Plotly Cross-Site Scripting (1.0.2)
CVE-2015-5484
CWE-79
High
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Multiple Cross-Site Scripting Vulnerabilities (1.8.4.2)
CVE-2015-5532
CWE-79
High
WordPress Plugin NewStatPress Multiple Vulnerabilities (1.0.4)
CVE-2015-9313
CWE-89
High
WordPress Plugin NewStatPress Cross-Site Scripting (1.0.5)
-
CWE-79
High
WordPress Plugin NewStatPress Cross-Site Scripting (1.0.3)
-
CWE-79
High
WordPress Plugin MDC YouTube Downloader Local File Inclusion (2.1.0)
CVE-2015-5469
CWE-22
High
WordPress Plugin MailCWP Arbitrary File Upload (1.99)
CVE-2015-1000000
CWE-434
High
WordPress Plugin InfiniteWP Client Unspecified Vulnerability (1.3.14)
-
-
High
WordPress Plugin WordPress Mobile Pack Information Disclosure (2.1.2)
CVE-2015-9269
CWE-200
High
WordPress Plugin WooCommerce Social Login PHP Object Injection (2.6.2)
CVE-2024-5871
CWE-915
High
WordPress Plugin IBS Mappro Arbitrary File Download (0.6)
CVE-2015-5472
CWE-22
High
WebLogic CVE-2020-14639 Vulnerability (CVE-2020-14639)
CVE-2020-14639
-
High
WordPress Plugin Car Rental System SQL Injection (3.0)
-
CWE-89
High
WordPress Plugin Captain Slider Cross-Site Scripting (1.0.6)
-
CWE-79
High
WordPress Plugin Bookmarkify Multiple Vulnerabilities (2.9.2)
-
CWE-352
High
WordPress Plugin Avenir-soft Direct Download Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Author Manager Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin arcResBookingWidget Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Analyticator Multiple Cross-Site Scripting Vulnerabilities (6.4.9.5)
CVE-2015-6238
CWE-79
High
WordPress Plugin Altos Connect Widget Cross-Site Scripting (1.3.0)
-
CWE-79
High
WordPress Plugin Advertisement Management Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Advance Categorizer Cross-Site Scripting (0.3)
-
CWE-79
High
WordPress Plugin WP Attachment Export Arbitrary File Download (0.2.3)
-
CWE-538
High
WordPress Plugin Ads in bottom right Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Admin Pack by SITE CASEIRO Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin WooCommerce Social Login PHP Object Injection (2.6.3)
CVE-2024-37502
CWE-915
High
WordPress Plugin 1-click Retweet/Share/Like Cross-Site Scripting (5.2)
-
CWE-79
High
WordPress Plugin YOP Poll Multiple Cross-Site Scripting Vulnerabilities (4.9.1)
-
CWE-79
High
WordPress Plugin YOP Poll Cross-Site Scripting (5.7.3)
-
CWE-79
High
WordPress Plugin wptf-image-gallery Arbitrary File Download (1.0.3)
CVE-2015-1000007
CWE-538
High
MySQL CVE-2020-14663 Vulnerability (CVE-2020-14663)
CVE-2020-14663
-
High
WordPress Plugin WP e-Commerce Shop Styling Arbitrary File Download (2.5)
CVE-2015-5468
CWE-22
High
MySQL CVE-2020-14678 Vulnerability (CVE-2020-14678)
CVE-2020-14678
-
High
WordPress Plugin Image Export Arbitrary File Download (1.1.0)
CVE-2015-5609
CWE-22
High
WordPress Plugin GD bbPress Attachments Multiple Vulnerabilities (2.2)
CVE-2015-5481
CWE-79
High
WordPress Plugin Content Grabber Multiple Vulnerabilities (1.0)
-
CWE-352
High
WebLogic CVE-2020-14883 Vulnerability (CVE-2020-14883)
CVE-2020-14883
-
High
WordPress Plugin WP Mobile Detector Unspecified Vulnerability (2.1)
-
-
High
WordPress Plugin WP Mobile Detector Cross-Site Scripting (3.2)
-
CWE-79
High
WordPress Plugin WP-CopyProtect [Protect your blog posts] Cross-Site Scripting (3.0.0)
-
CWE-79
High
WordPress Plugin Wow Moodboard Lite Open Redirect (1.1.1.1)
CVE-2015-4070
CWE-601
High
WordPress Plugin WordPress renaming tool by Vlajo Arbitrary File Download (1.0)
CVE-2015-4703
CWE-538
High
WordPress Plugin WordPress Landing Pages Cross-Site Scripting (1.8.7)
-
CWE-79
High
WordPress Plugin WordPress Landing Pages Cross-Site Scripting (1.8.5)
-
CWE-79
High
MySQL CVE-2020-14878 Vulnerability (CVE-2020-14878)
CVE-2020-14878
-
High
WordPress Plugin WPCafe-Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce Cross-Site Scripting (2.2.24)
CVE-2024-5427
CWE-79
High
WordPress Plugin WordPress Calls to Action Unspecified Vulnerability (2.3.1)
-
-
High
Internet Information Services Permissions, Privileges, and Access Controls Vulnerability (CVE-1999-0777)
CVE-1999-0777
CWE-264
High
WordPress Plugin WordPress Calls to Action Unspecified Vulnerability (2.3.5)
-
-
High
WordPress Plugin WordPress Calls to Action Multiple Vulnerabilities (2.3.7)
-
CWE-352
High
PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-14960)
CVE-2020-14960
CWE-138
High
WordPress Plugin WooCommerce Object Injection (2.3.10)
-
CWE-915
High
WordPress Plugin VaultPress Unspecified Vulnerability (1.7.1)
-
-
High
WordPress Plugin Users Ultra SQL Injection (1.5.15)
CVE-2015-4109
CWE-89
High
Nexus Repository Manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-15012)
CVE-2020-15012
CWE-22
High
WordPress Plugin Users to CSV Cross-Site Request Forgery (1.4.5)
-
CWE-352
High
Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-15049)
CVE-2020-15049
CWE-444
High
phpList Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-15072)
CVE-2020-15072
CWE-138
High
WordPress Plugin WP Mobile Edition Multiple Vulnerabilities (2.4)
-
CWE-79
High
WordPress Plugin WP Rollback Multiple Vulnerabilities (1.2.2)
-
CWE-352
High
WordPress Plugin Floating Social Bar Cross-Site Scripting (1.1.5)
CVE-2015-5528
CWE-79
High
WordPress Plugin Creative Contact Form-The Best WordPress Contact Form Builder Arbitrary File Upload (0.9.7)
CVE-2014-7969
CWE-94
High
WordPress Plugin Fast Image Adder Arbitrary File Upload (1.1)
CVE-2015-1000001
CWE-434
High
WordPress Plugin Custom Content Type Manager Remote Code Execution (0.9.8.5)
CVE-2015-3173
CWE-94
High
WordPress Plugin CP Image Store with Slideshow Arbitrary File Download (1.0.5)
-
CWE-22
High
WordPress Plugin CP Contact Form with PayPal Multiple Vulnerabilities (1.1.5)
-
CWE-352
High
WordPress Plugin Count per Day SQL Injection (3.4)
CVE-2015-5533
CWE-89
High
WordPress Plugin Candidate Application Form Arbitrary File Download (1.0)
CVE-2015-1000005
CWE-22
High