Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Dean's Permalinks Migration Cross-Site Request Forgery (1.0)
CVE-2008-0508
CWE-352
High
Oracle HTTP Server CVE-2023-22019 Vulnerability (CVE-2023-22019)
CVE-2023-22019
-
High
WordPress Plugin AdServe 'id' Parameter SQL Injection (0.2)
CVE-2008-0507
CWE-89
High
WordPress Plugin PictPress 'resize.php' Multiple Local File Include Vulnerabilities (1.0)
CVE-2007-6369
CWE-22
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (0.9.2)
-
CWE-79
High
WordPress Plugin BackUpWordPress Remote File Inclusion (0.4.2b)
CVE-2007-5800
CWE-94
High
WordPress Plugin WP-FeedStats de HTML Injection (2.3)
CVE-2007-4104
CWE-79
High
WordPress Plugin Automattic Stats Referer Field HTML Injection (1.0)
-
CWE-79
High
WordPress Plugin Ruben Boelinger WP-Table 'wpPATH' Parameter Multiple Remote File Include Vulnerabilities (1.43)
CVE-2007-2484
CWE-94
High
WordPress Plugin Ruben Boelinger wordTube 'wpPATH' Parameter Multiple Remote File Include Vulnerabilities (1.43)
CVE-2007-2482
CWE-94
High
WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.10)
-
CWE-502
High
WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.12)
-
CWE-502
High
WebLogic CVE-2023-21964 Vulnerability (CVE-2023-21964)
CVE-2023-21964
-
High
Microsoft SQL Server CVE-2023-23384 Vulnerability (CVE-2023-23384)
CVE-2023-23384
-
High
Ruby Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22795)
CVE-2023-22795
CWE-1333
High
Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22795)
CVE-2023-22795
CWE-1333
High
WordPress 4.8.x Directory Traversal (4.8 - 4.8.24)
-
CWE-22
High
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.27)
-
CWE-502
High
WordPress 4.7.x Directory Traversal (4.7 - 4.7.28)
-
CWE-22
High
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.27)
-
CWE-502
High
WordPress 4.6.x Directory Traversal (4.6 - 4.6.28)
-
CWE-22
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.30)
-
CWE-502
High
Multiple SugarCRM Products Remote Code Execution Vulnerability (CVE-2023-22952)
CVE-2023-22952
-
High
WordPress 4.5.x Directory Traversal (4.5 - 4.5.31)
-
CWE-22
High
WordPress Uncontrolled Resource Consumption Vulnerability (CVE-2023-22622)
CVE-2023-22622
CWE-400
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.31)
-
CWE-502
High
WordPress 4.4.x Directory Traversal (4.4 - 4.4.32)
-
CWE-22
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.32)
-
CWE-502
High
WordPress 4.3.x Directory Traversal (4.3 - 4.3.33)
-
CWE-22
High
Joomla Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-23755)
CVE-2023-23755
CWE-307
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.36)
-
CWE-502
High
WordPress 4.2.x Directory Traversal (4.2 - 4.2.37)
-
CWE-22
High
Moodle CVE-2023-23923 Vulnerability (CVE-2023-23923)
CVE-2023-23923
-
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.39)
-
CWE-502
High
WordPress 4.1.x Directory Traversal (4.1 - 4.1.40)
-
CWE-22
High
Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22792)
CVE-2023-22792
CWE-1333
High
Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-22526)
CVE-2023-22526
CWE-94
High
WordPress 5.6.x Directory Traversal (5.6 - 5.6.13)
-
CWE-22
High
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.19)
-
CWE-502
High
WebLogic CVE-2023-22086 Vulnerability (CVE-2023-22086)
CVE-2023-22086
-
High
WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.13)
-
CWE-502
High
WordPress 5.5.x Directory Traversal (5.5 - 5.5.14)
-
CWE-22
High
WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.14)
-
CWE-502
High
WordPress 5.4.x Directory Traversal (5.4 - 5.4.15)
-
CWE-22
High
WebLogic CVE-2023-22101 Vulnerability (CVE-2023-22101)
CVE-2023-22101
-
High
MySQL CVE-2023-22102 Vulnerability (CVE-2023-22102)
CVE-2023-22102
-
High
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.16)
-
CWE-502
High
WordPress 5.3.x Directory Traversal (5.3 - 5.3.17)
-
CWE-22
High
WebLogic CVE-2023-22108 Vulnerability (CVE-2023-22108)
CVE-2023-22108
-
High
WordPress 5.2.x Directory Traversal (5.2 - 5.2.20)
-
CWE-22
High
Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22522)
CVE-2023-22522
CWE-138
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.17)
-
CWE-502
High
WordPress 5.1.x Directory Traversal (5.1 - 5.1.18)
-
CWE-22
High
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.20)
-
CWE-502
High
WordPress 5.0.x Directory Traversal (5.0 - 5.0.21)
-
CWE-22
High
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.24)
-
CWE-502
High
WordPress 4.9.x Directory Traversal (4.9 - 4.9.25)
-
CWE-22
High
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.23)
-
CWE-502
High
Atlassian Confluence CVE-2023-22505 Vulnerability (CVE-2023-22505)
CVE-2023-22505
-
High
Atlassian Confluence CVE-2023-22508 Vulnerability (CVE-2023-22508)
CVE-2023-22508
-
High
Atlassian Confluence CVE-2023-22512 Vulnerability (CVE-2023-22512)
CVE-2023-22512
-
High
WordPress Plugin Sniplets Multiple Input Validation Vulnerabilities (1.2.2)
CVE-2008-1061
CWE-95
High
WordPress Plugin Wordspew 'id' Parameter SQL Injection (1.16)
CVE-2008-0682
CWE-89
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-23969)
CVE-2023-23969
CWE-770
High
WordPress Plugin DB Toolkit 'uploadify.php' Arbitrary File Upload (0.1.10)
-
CWE-434
High
WordPress Plugin Vodpod Video Gallery 'gid' Parameter Cross-Site Scripting (3.1.5)
CVE-2010-4875
CWE-79
High
WordPress Plugin SEO Tools 'file' Parameter Directory Traversal (3.1.7)
-
CWE-22
High
phpMyFAQ Weak Password Requirements Vulnerability (CVE-2023-0793)
CVE-2023-0793
CWE-521
High
WordPress Plugin Register Plus 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities (3.5.1)
CVE-2010-4402
CWE-79
High
WordPress Plugin jRSS Widget 'url' Parameter Directory Traversal (1.1.1)
-
CWE-22
High
WordPress Plugin FeedList 'handler_image.php' Cross-Site Scripting (2.61.01)
CVE-2010-4637
CWE-79
High
Undertow Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-1108)
CVE-2023-1108
CWE-835
High
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-1108)
CVE-2023-1108
CWE-835
High
WordPress Plugin Event Registration 'event_id' Parameter SQL Injection (5.32)
CVE-2010-4839
CWE-89
High
WordPress Plugin cformsII 'lib_ajax.php' Multiple Cross-Site Scripting Vulnerabilities (13.1)
CVE-2010-3977
CWE-79
High