Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23409 vulnerabilities in this category.

Critical: 1513 High: 12591 Medium: 8518 Low: 783 Information: 4
Vulnerability Name
CVE
CWE
Severity
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5966)
CVE-2023-5966
CWE-434
High
WordPress 4.2.x Arbitrary File Deletion Vulnerability (4.2 - 4.2.20)
CVE-2018-12895
CWE-73
High
Wordpress Plugin Backup Migration Files or Directories Accessible to External Parties Vulnerability (CVE-2023-6266)
CVE-2023-6266
CWE-552
High
Wordpress Plugin Backup Migration Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-7002)
CVE-2023-7002
CWE-138
High
Wordpress Plugin Backup Migration CVE-2023-6271 Vulnerability (CVE-2023-6271)
CVE-2023-6271
-
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.20)
CVE-2017-17094
CWE-330
High
WP Plugin Contact Form 7 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-6449)
CVE-2023-6449
CWE-434
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.22)
CVE-2018-10102
CWE-601
High
WordPress 4.1.x Denial of Service Vulnerability (4.1 - 4.1.22)
CVE-2018-6389
CWE-400
High
WordPress 4.1.x Cross-Domain Flash Injection Vulnerability (4.1 - 4.1.21)
CVE-2018-5776
CWE-269
High
WordPress 4.1.x Arbitrary File Deletion Vulnerability (4.1 - 4.1.23)
CVE-2018-12895
CWE-73
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.24)
CVE-2018-20153
CWE-915
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.20)
CVE-2017-17094
CWE-330
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.22)
CVE-2018-10102
CWE-601
High
WordPress 4.0.x PHP Object Injection (4.0 - 4.0.32)
CVE-2020-36326
CWE-915
High
WordPress 4.2.x PHP Object Injection (4.2 - 4.2.29)
CVE-2020-36326
CWE-915
High
WordPress 4.4.x Cross-Site Scripting Vulnerability (4.4 - 4.4.2)
CVE-2016-4567
CWE-79
High
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.17)
CVE-2023-2745
CWE-862
High
WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.12)
CVE-2023-2745
CWE-862
High
Nginx Out-of-bounds Read Vulnerability (CVE-2023-27727)
CVE-2023-27727
CWE-125
High
Nginx Out-of-bounds Read Vulnerability (CVE-2023-27728)
CVE-2023-27728
CWE-125
High
Nginx CVE-2023-27729 Vulnerability (CVE-2023-27729)
CVE-2023-27729
-
High
Nginx Out-of-bounds Read Vulnerability (CVE-2023-27730)
CVE-2023-27730
CWE-125
High
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.15)
CVE-2023-39999
CWE-863
High
Jenkins Incorrect Authorization Vulnerability (CVE-2023-27899)
CVE-2023-27899
CWE-863
High
Jenkins Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27900)
CVE-2023-27900
CWE-770
High
Jenkins Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27901)
CVE-2023-27901
CWE-770
High
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.14)
CVE-2023-2745
CWE-862
High
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.18)
CVE-2023-39999
CWE-863
High
Envoy Proxy CVE-2023-27496 Vulnerability (CVE-2023-27496)
CVE-2023-27496
-
High
SharePoint CVE-2023-28288 Vulnerability (CVE-2023-28288)
CVE-2023-28288
-
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-28329)
CVE-2023-28329
CWE-138
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.16)
CVE-2023-39999
CWE-863
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.15)
CVE-2023-2745
CWE-862
High
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.19)
CVE-2023-39999
CWE-863
High
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.18)
CVE-2023-2745
CWE-862
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-28335)
CVE-2023-28335
CWE-352
High
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.23)
CVE-2023-39999
CWE-863
High
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.22)
CVE-2023-2745
CWE-862
High
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.22)
CVE-2023-39999
CWE-863
High
Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27522)
CVE-2023-27522
-
High
WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.13)
CVE-2023-39999
CWE-863
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2023-28625)
CVE-2023-28625
CWE-476
High
XWiki CVE-2023-26474 Vulnerability (CVE-2023-26474)
CVE-2023-26474
-
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.3)
CVE-2023-2745
CWE-862
High
WordPress 5.9.x Shortcode Execution (5.9 - 5.9.6)
-
CWE-862
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.7)
CVE-2023-39999
CWE-863
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.5)
CVE-2023-2745
CWE-862
High
IBMHttpServer Improper Input Validation Vulnerability (CVE-2023-26281)
CVE-2023-26281
CWE-20
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.6)
CVE-2023-2745
CWE-862
High
XWiki Out-of-bounds Write Vulnerability (CVE-2023-26470)
CVE-2023-26470
CWE-787
High
XWiki CVE-2023-26471 Vulnerability (CVE-2023-26471)
CVE-2023-26471
-
High
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-26472)
CVE-2023-26472
CWE-116
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.7)
CVE-2023-39999
CWE-863
High
XWiki Improper Privilege Management Vulnerability (CVE-2023-26475)
CVE-2023-26475
CWE-269
High
XWiki Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-27480)
CVE-2023-27480
CWE-611
High
XWiki Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-26476)
CVE-2023-26476
CWE-307
High
XWiki Other Vulnerability (CVE-2023-26478)
CVE-2023-26478
-
High
WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.9)
CVE-2023-39999
CWE-863
High
WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.8)
CVE-2023-2745
CWE-862
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-26876)
CVE-2023-26876
CWE-138
High
WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.10)
CVE-2023-2745
CWE-862
High
WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.11)
CVE-2023-39999
CWE-863
High
WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.11)
CVE-2023-2745
CWE-862
High
WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.12)
CVE-2023-39999
CWE-863
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-27233)
CVE-2023-27233
CWE-138
High
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.21)
CVE-2023-2745
CWE-862
High
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.25)
CVE-2023-2745
CWE-862
High
WordPress 6.0.x Shortcode Execution (6.0 - 6.0.4)
-
CWE-862
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29524)
CVE-2023-29524
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29514)
CVE-2023-29514
CWE-138
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.37)
CVE-2023-2745
CWE-862
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29516)
CVE-2023-29516
CWE-138
High
XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-29517)
CVE-2023-29517
CWE-200
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29518)
CVE-2023-29518
CWE-138
High