Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23409 vulnerabilities in this category.

Critical: 1513 High: 12591 Medium: 8518 Low: 783 Information: 4
Vulnerability Name
CVE
CWE
Severity
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29519)
CVE-2023-29519
CWE-138
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.38)
CVE-2023-39999
CWE-863
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29521)
CVE-2023-29521
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29522)
CVE-2023-29522
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29523)
CVE-2023-29523
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29525)
CVE-2023-29525
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29512)
CVE-2023-29512
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29526)
CVE-2023-29526
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29527)
CVE-2023-29527
CWE-138
High
WordPress Server-Side Request Forgery (3.7 - 6.1.1)
CVE-2022-3590
CWE-918
High
Opencart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-2315)
CVE-2023-2315
CWE-22
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.1)
-
CWE-89
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.2)
CVE-2022-43504
CWE-601
High
PostgreSQL CVE-2023-2454 Vulnerability (CVE-2023-2454)
CVE-2023-2454
-
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.4)
CVE-2022-43504
CWE-601
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.3)
-
CWE-89
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.1)
CVE-2021-20083
CWE-1321
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.34)
CVE-2023-2745
CWE-862
High
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2023-29511)
CVE-2023-29511
CWE-707
High
Apache Tomcat Off-by-one Error Vulnerability (CVE-2023-28709)
CVE-2023-28709
CWE-193
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29209)
CVE-2023-29209
CWE-94
High
Ruby Inefficient Regular Expression Complexity Vulnerability (CVE-2023-28756)
CVE-2023-28756
CWE-1333
High
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.26)
CVE-2023-39999
CWE-863
High
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.25)
CVE-2023-2745
CWE-862
High
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.26)
CVE-2023-39999
CWE-863
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.29)
CVE-2023-39999
CWE-863
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.28)
CVE-2023-2745
CWE-862
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.30)
CVE-2023-39999
CWE-863
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.29)
CVE-2023-2745
CWE-862
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.30)
CVE-2023-2745
CWE-862
High
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-29208)
CVE-2023-29208
CWE-668
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29210)
CVE-2023-29210
CWE-94
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29510)
CVE-2023-29510
CWE-138
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29211)
CVE-2023-29211
CWE-94
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29212)
CVE-2023-29212
CWE-94
High
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-29213)
CVE-2023-29213
CWE-352
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29214)
CVE-2023-29214
CWE-94
High
Microsoft SQL Server CVE-2023-29349 Vulnerability (CVE-2023-29349)
CVE-2023-29349
-
High
Microsoft SQL Server CVE-2023-29356 Vulnerability (CVE-2023-29356)
CVE-2023-29356
-
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.31)
CVE-2023-39999
CWE-863
High
XWiki Other Vulnerability (CVE-2023-29507)
CVE-2023-29507
-
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.35)
CVE-2023-39999
CWE-863
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29509)
CVE-2023-29509
CWE-94
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.5)
CVE-2023-39999
CWE-863
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.3)
CVE-2023-39999
CWE-863
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.4)
-
CWE-89
High
WordPress 5.8.x Directory Traversal (5.8 - 5.8.9)
-
CWE-22
High
WordPress 6.2.x Cross-Site Scripting (6.2 - 6.2.4)
CVE-2024-4439
CWE-79
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.6)
-
CWE-79
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.4)
-
CWE-502
High
WordPress 6.1.x Cross-Site Scripting (6.1 - 6.1.5)
CVE-2024-4439
CWE-79
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.8)
-
CWE-79
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.6)
-
CWE-502
High
WordPress 6.0.x Cross-Site Scripting (6.0 - 6.0.7)
CVE-2024-4439
CWE-79
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.9)
-
CWE-79
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.8)
-
CWE-502
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.8)
-
CWE-502
High
WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.10)
-
CWE-502
High
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.5)
-
CWE-79
High
WordPress 5.7.x Directory Traversal (5.7 - 5.7.11)
-
CWE-22
High
WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.12)
-
CWE-502
High
WordPress 5.6.x Directory Traversal (5.6 - 5.6.13)
-
CWE-22
High
WebLogic CVE-2023-22086 Vulnerability (CVE-2023-22086)
CVE-2023-22086
-
High
WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.13)
-
CWE-502
High
WordPress 5.5.x Directory Traversal (5.5 - 5.5.14)
-
CWE-22
High
WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.14)
-
CWE-502
High
WordPress 5.4.x Directory Traversal (5.4 - 5.4.15)
-
CWE-22
High
WebLogic CVE-2023-22101 Vulnerability (CVE-2023-22101)
CVE-2023-22101
-
High
MySQL CVE-2023-22102 Vulnerability (CVE-2023-22102)
CVE-2023-22102
-
High
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.3)
-
CWE-502
High
WordPress 6.3.x Cross-Site Scripting (6.3 - 6.3.3)
CVE-2024-4439
CWE-79
High
WordPress 5.3.x Directory Traversal (5.3 - 5.3.17)
-
CWE-22
High
WordPress Plugin Ruben Boelinger WP-Table 'wpPATH' Parameter Multiple Remote File Include Vulnerabilities (1.43)
CVE-2007-2484
CWE-94
High
WordPress Plugin Peter's Math Anti-Spam Audio CAPTCHA Security Bypass (0.1.6)
CVE-2008-7216
CWE-264
High
WordPress Plugin fGallery SQL Injection (2.4.1)
CVE-2008-0491
CWE-89
High