🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Missing Update
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Missing Update
This page lists
23409 vulnerabilities
in this category.
Critical: 1513
High: 12591
Medium: 8518
Low: 783
Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Dean's Permalinks Migration Cross-Site Request Forgery (1.0)
CVE-2008-0508
CWE-352
High
Oracle HTTP Server CVE-2023-22019 Vulnerability (CVE-2023-22019)
CVE-2023-22019
-
High
WordPress Plugin AdServe 'id' Parameter SQL Injection (0.2)
CVE-2008-0507
CWE-89
High
WordPress Plugin PictPress 'resize.php' Multiple Local File Include Vulnerabilities (1.0)
CVE-2007-6369
CWE-22
High
WordPress Plugin Slimstat Analytics Cross-Site Scripting (0.9.2)
-
CWE-79
High
WordPress Plugin BackUpWordPress Remote File Inclusion (0.4.2b)
CVE-2007-5800
CWE-94
High
WordPress Plugin WP-FeedStats de HTML Injection (2.3)
CVE-2007-4104
CWE-79
High
WordPress Plugin Automattic Stats Referer Field HTML Injection (1.0)
-
CWE-79
High
WordPress Plugin Ruben Boelinger wordTube 'wpPATH' Parameter Multiple Remote File Include Vulnerabilities (1.43)
CVE-2007-2482
CWE-94
High
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.2)
-
CWE-502
High
WordPress Plugin myFlash Remote File Include (1.10)
CVE-2007-2485
CWE-94
High
WordPress Plugin myGallery Remote File Include (1.4b4)
CVE-2007-2426
CWE-94
High
WordPress Plugin Database Backup for WordPress 'edit.php' Directory Traversal (1.7)
CVE-2006-4208
CWE-22
High
WordPress Plugin WP-Stats 'author' Parameter SQL Injection (2.0)
CVE-2006-0238
CWE-89
High
WordPress 6.5.x Multiple Vulnerabilities (6.5 - 6.5.4)
-
CWE-79
High
WordPress 6.5 Cross-Site Scripting (6.5)
CVE-2024-4439
CWE-79
High
WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.2)
-
CWE-502
High
WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.4)
-
CWE-79
High
WordPress 6.4.x Cross-Site Scripting (6.4 - 6.4.3)
CVE-2024-4439
CWE-79
High
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.4)
-
CWE-79
High
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.16)
-
CWE-502
High
WebLogic CVE-2023-22108 Vulnerability (CVE-2023-22108)
CVE-2023-22108
-
High
Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-25577)
CVE-2023-25577
CWE-770
High
WordPress 6.4.x Remote Code Execution (6.4 - 6.4.1)
-
CWE-502
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.31)
-
CWE-502
High
WordPress 4.4.x Directory Traversal (4.4 - 4.4.32)
-
CWE-22
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.32)
-
CWE-502
High
WordPress 4.3.x Directory Traversal (4.3 - 4.3.33)
-
CWE-22
High
Joomla Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-23755)
CVE-2023-23755
CWE-307
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.36)
-
CWE-502
High
WordPress 4.2.x Directory Traversal (4.2 - 4.2.37)
-
CWE-22
High
Moodle CVE-2023-23923 Vulnerability (CVE-2023-23923)
CVE-2023-23923
-
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.39)
-
CWE-502
High
WordPress 4.1.x Directory Traversal (4.1 - 4.1.40)
-
CWE-22
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-23969)
CVE-2023-23969
CWE-770
High
Microsoft SQL Server CVE-2023-23384 Vulnerability (CVE-2023-23384)
CVE-2023-23384
-
High
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.1)
CVE-2023-39999
CWE-863
High
WordPress 6.2.x Shortcode Execution (6.2 - 6.2.1)
-
CWE-862
High
Python Improper Input Validation Vulnerability (CVE-2023-24329)
CVE-2023-24329
CWE-20
High
Django Uncontrolled Resource Consumption Vulnerability (CVE-2023-24580)
CVE-2023-24580
CWE-400
High
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.2)
CVE-2023-39999
CWE-863
High
WordPress 6.2 Multiple Vulnerabilities (6.2)
CVE-2023-2745
CWE-862
High
WordPress 6.1.x Shortcode Execution (6.1 - 6.1.2)
-
CWE-862
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.1)
CVE-2023-2745
CWE-862
High
SharePoint Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-24955)
CVE-2023-24955
CWE-94
High
PrestaShop Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-25170)
CVE-2023-25170
CWE-352
High
WordPress 4.5.x Directory Traversal (4.5 - 4.5.31)
-
CWE-22
High
Multiple SugarCRM Products Remote Code Execution Vulnerability (CVE-2023-22952)
CVE-2023-22952
-
High
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.19)
-
CWE-502
High
Atlassian Confluence CVE-2023-22512 Vulnerability (CVE-2023-22512)
CVE-2023-22512
-
High
WordPress 5.2.x Directory Traversal (5.2 - 5.2.20)
-
CWE-22
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.17)
-
CWE-502
High
WordPress 5.1.x Directory Traversal (5.1 - 5.1.18)
-
CWE-22
High
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.20)
-
CWE-502
High
WordPress 5.0.x Directory Traversal (5.0 - 5.0.21)
-
CWE-22
High
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.24)
-
CWE-502
High
WordPress 4.9.x Directory Traversal (4.9 - 4.9.25)
-
CWE-22
High
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.23)
-
CWE-502
High
Atlassian Confluence CVE-2023-22505 Vulnerability (CVE-2023-22505)
CVE-2023-22505
-
High
Atlassian Confluence CVE-2023-22508 Vulnerability (CVE-2023-22508)
CVE-2023-22508
-
High
Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22522)
CVE-2023-22522
CWE-138
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.30)
-
CWE-502
High
Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-22526)
CVE-2023-22526
CWE-94
High
WordPress Uncontrolled Resource Consumption Vulnerability (CVE-2023-22622)
CVE-2023-22622
CWE-400
High
Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22792)
CVE-2023-22792
CWE-1333
High
Ruby Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22795)
CVE-2023-22795
CWE-1333
High
Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22795)
CVE-2023-22795
CWE-1333
High
WordPress 4.8.x Directory Traversal (4.8 - 4.8.24)
-
CWE-22
High
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.27)
-
CWE-502
High
WordPress 4.7.x Directory Traversal (4.7 - 4.7.28)
-
CWE-22
High
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.27)
-
CWE-502
High
WordPress 4.6.x Directory Traversal (4.6 - 4.6.28)
-
CWE-22
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.2)
CVE-2022-21664
CWE-915
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.5)
CVE-2022-43504
CWE-601
High
WordPress 4.3.x PHP Object Injection (4.3 - 4.3.25)
CVE-2020-36326
CWE-915
High
«
1
...
62
63
64
...
313
»