🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
Documentation
Get a demo
Home
/
Web Application Vulnerabilities
/ Missing Update
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Missing Update
This page lists
23101 vulnerabilities
in this category.
Critical: 1474
High: 12458
Medium: 8395
Low: 770
Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.30)
CVE-2019-17675
CWE-918
High
WordPress 3.8.x Cross-Site Request Forgery (3.8 - 3.8.28)
CVE-2019-9787
CWE-352
High
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.31)
CVE-2019-20043
CWE-269
High
Dolibarr Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-4197)
CVE-2023-4197
CWE-138
High
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.29)
CVE-2019-16223
CWE-601
High
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.30)
CVE-2019-17675
CWE-918
High
Chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-4221)
CVE-2023-4221
CWE-138
High
Chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-4222)
CVE-2023-4222
CWE-138
High
CubeCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-47675)
CVE-2023-47675
CWE-138
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.28)
CVE-2019-20043
CWE-269
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46243)
CVE-2023-46243
CWE-94
High
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46816)
CVE-2023-46816
CWE-94
High
XWiki Incorrect Authorization Vulnerability (CVE-2023-46244)
CVE-2023-46244
CWE-863
High
WordPress 4.3.x Cross-Site Request Forgery (4.3 - 4.3.18)
CVE-2019-9787
CWE-352
High
Next.js CVE-2023-46298 Vulnerability (CVE-2023-46298)
CVE-2023-46298
-
High
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-46589)
CVE-2023-46589
-
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-46695)
CVE-2023-46695
CWE-770
High
Squid Improper Certificate Validation Vulnerability (CVE-2023-46724)
CVE-2023-46724
CWE-295
High
Squid NULL Pointer Dereference Vulnerability (CVE-2023-46728)
CVE-2023-46728
CWE-476
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.25)
CVE-2019-20043
CWE-269
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.24)
CVE-2019-17675
CWE-918
High
SugarCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-46815)
CVE-2023-46815
CWE-434
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.23)
CVE-2019-16223
CWE-601
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.26)
CVE-2019-16223
CWE-601
High
Squid Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2023-46847)
CVE-2023-46847
CWE-120
High
Squid Incorrect Conversion between Numeric Types Vulnerability (CVE-2023-46848)
CVE-2023-46848
CWE-681
High
OpenVPN AS Divide By Zero Vulnerability (CVE-2023-46849)
CVE-2023-46849
CWE-369
High
WordPress 4.2.x Cross-Site Request Forgery (4.2 - 4.2.22)
CVE-2019-9787
CWE-352
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.27)
CVE-2019-17675
CWE-918
High
Perl Out-of-bounds Write Vulnerability (CVE-2023-47038)
CVE-2023-47038
CWE-787
High
Perl Out-of-bounds Write Vulnerability (CVE-2023-47039)
CVE-2023-47039
CWE-787
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.28)
CVE-2019-20043
CWE-269
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.26)
CVE-2019-16223
CWE-601
High
WordPress 4.1.x Cross-Site Request Forgery (4.1 - 4.1.25)
CVE-2019-9787
CWE-352
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.27)
CVE-2022-43504
CWE-601
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.26)
-
CWE-89
High
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.23)
CVE-2018-10102
CWE-601
High
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.3)
-
CWE-502
High
WordPress 6.5.x Multiple Vulnerabilities (6.5 - 6.5.4)
-
CWE-79
High
WordPress 6.5 Cross-Site Scripting (6.5)
CVE-2024-4439
CWE-79
High
WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.2)
-
CWE-502
High
WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.4)
-
CWE-79
High
WordPress 6.4.x Cross-Site Scripting (6.4 - 6.4.3)
CVE-2024-4439
CWE-79
High
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.4)
-
CWE-79
High
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.2)
-
CWE-502
High
WordPress 6.3.x Cross-Site Scripting (6.3 - 6.3.3)
CVE-2024-4439
CWE-79
High
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.5)
-
CWE-79
High
WordPress 6.2.x Cross-Site Scripting (6.2 - 6.2.4)
CVE-2024-4439
CWE-79
High
WordPress Plugin Database Backup for WordPress 'edit.php' Directory Traversal (1.7)
CVE-2006-4208
CWE-22
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.6)
-
CWE-79
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.4)
-
CWE-502
High
WordPress 6.1.x Cross-Site Scripting (6.1 - 6.1.5)
CVE-2024-4439
CWE-79
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.8)
-
CWE-79
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.6)
-
CWE-502
High
WordPress 6.0.x Cross-Site Scripting (6.0 - 6.0.7)
CVE-2024-4439
CWE-79
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.9)
-
CWE-79
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.8)
-
CWE-502
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.8)
-
CWE-502
High
WordPress 5.8.x Directory Traversal (5.8 - 5.8.9)
-
CWE-22
High
WordPress Plugin WP-Stats 'author' Parameter SQL Injection (2.0)
CVE-2006-0238
CWE-89
High
WordPress Plugin myGallery Remote File Include (1.4b4)
CVE-2007-2426
CWE-94
High
WordPress 5.7.x Directory Traversal (5.7 - 5.7.11)
-
CWE-22
High
WordPress Plugin Peter's Math Anti-Spam Audio CAPTCHA Security Bypass (0.1.6)
CVE-2008-7216
CWE-264
High
WordPress Plugin Search Unleashed 'Log' Function HTML Injection (0.2.10)
-
CWE-79
High
WordPress Plugin DMSGuestbook Multiple Remote Vulnerabilities (1.8.0)
CVE-2008-0618
CWE-89
High
WordPress Plugin WP-Forum SQL Injection (1.7.4)
CVE-2008-0388
CWE-89
High
WordPress Plugin Wp-FileManager 'ajaxfilemanager.php' Arbitrary File Upload (1.2)
CVE-2008-0222
CWE-94
High
WebLogic CVE-2023-21979 Vulnerability (CVE-2023-21979)
CVE-2023-21979
-
High
MySQL CVE-2023-21980 Vulnerability (CVE-2023-21980)
CVE-2023-21980
-
High
WordPress Plugin WP-Cal 'id' Parameter SQL Injection (0.3)
CVE-2008-0490
CWE-89
High
WebLogic CVE-2023-21996 Vulnerability (CVE-2023-21996)
CVE-2023-21996
-
High
WordPress Plugin WassUp Real Time Analytics 'spy.php' SQL Injection (1.4.3)
CVE-2008-0520
CWE-89
High
WordPress Plugin SpamBam Key Calculation Security Bypass (2.1)
-
CWE-264
High
WordPress Plugin fGallery SQL Injection (2.4.1)
CVE-2008-0491
CWE-89
High
WordPress Plugin myFlash Remote File Include (1.10)
CVE-2007-2485
CWE-94
High
«
1
...
59
60
61
...
309
»