Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress 6.1.x Shortcode Execution (6.1 - 6.1.2)
-
CWE-862
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.1)
CVE-2023-2745
CWE-862
High
SharePoint Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-24955)
CVE-2023-24955
CWE-94
High
PrestaShop Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-25170)
CVE-2023-25170
CWE-352
High
Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-25577)
CVE-2023-25577
CWE-770
High
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.3)
CVE-2023-39999
CWE-863
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.5)
CVE-2023-39999
CWE-863
High
XWiki CVE-2023-26474 Vulnerability (CVE-2023-26474)
CVE-2023-26474
-
High
WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.3)
CVE-2023-2745
CWE-862
High
WordPress 5.9.x Shortcode Execution (5.9 - 5.9.6)
-
CWE-862
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.7)
CVE-2023-39999
CWE-863
High
WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.5)
CVE-2023-2745
CWE-862
High
IBMHttpServer Improper Input Validation Vulnerability (CVE-2023-26281)
CVE-2023-26281
CWE-20
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.6)
CVE-2023-2745
CWE-862
High
XWiki Out-of-bounds Write Vulnerability (CVE-2023-26470)
CVE-2023-26470
CWE-787
High
XWiki CVE-2023-26471 Vulnerability (CVE-2023-26471)
CVE-2023-26471
-
High
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-26472)
CVE-2023-26472
CWE-116
High
WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.7)
CVE-2023-39999
CWE-863
High
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.14)
CVE-2023-2745
CWE-862
High
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.18)
CVE-2023-39999
CWE-863
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29523)
CVE-2023-29523
CWE-138
High
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2023-29511)
CVE-2023-29511
CWE-707
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29212)
CVE-2023-29212
CWE-94
High
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-29213)
CVE-2023-29213
CWE-352
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29214)
CVE-2023-29214
CWE-94
High
Microsoft SQL Server CVE-2023-29349 Vulnerability (CVE-2023-29349)
CVE-2023-29349
-
High
Microsoft SQL Server CVE-2023-29356 Vulnerability (CVE-2023-29356)
CVE-2023-29356
-
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.31)
CVE-2023-39999
CWE-863
High
XWiki Other Vulnerability (CVE-2023-29507)
CVE-2023-29507
-
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.35)
CVE-2023-39999
CWE-863
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29509)
CVE-2023-29509
CWE-94
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29510)
CVE-2023-29510
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29512)
CVE-2023-29512
CWE-138
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29210)
CVE-2023-29210
CWE-94
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.34)
CVE-2023-2745
CWE-862
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29514)
CVE-2023-29514
CWE-138
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.37)
CVE-2023-2745
CWE-862
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29516)
CVE-2023-29516
CWE-138
High
XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-29517)
CVE-2023-29517
CWE-200
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29518)
CVE-2023-29518
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29519)
CVE-2023-29519
CWE-138
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.38)
CVE-2023-39999
CWE-863
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29521)
CVE-2023-29521
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29522)
CVE-2023-29522
CWE-138
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29211)
CVE-2023-29211
CWE-94
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29209)
CVE-2023-29209
CWE-94
High
SharePoint CVE-2023-28288 Vulnerability (CVE-2023-28288)
CVE-2023-28288
-
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2023-28625)
CVE-2023-28625
CWE-476
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-28329)
CVE-2023-28329
CWE-138
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.16)
CVE-2023-39999
CWE-863
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.15)
CVE-2023-2745
CWE-862
High
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.19)
CVE-2023-39999
CWE-863
High
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.18)
CVE-2023-2745
CWE-862
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-28335)
CVE-2023-28335
CWE-352
High
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.23)
CVE-2023-39999
CWE-863
High
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.22)
CVE-2023-2745
CWE-862
High
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.22)
CVE-2023-39999
CWE-863
High
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.21)
CVE-2023-2745
CWE-862
High
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.25)
CVE-2023-2745
CWE-862
High
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-29208)
CVE-2023-29208
CWE-668
High
Apache Tomcat Off-by-one Error Vulnerability (CVE-2023-28709)
CVE-2023-28709
CWE-193
High
Ruby Inefficient Regular Expression Complexity Vulnerability (CVE-2023-28756)
CVE-2023-28756
CWE-1333
High
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.26)
CVE-2023-39999
CWE-863
High
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.25)
CVE-2023-2745
CWE-862
High
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.26)
CVE-2023-39999
CWE-863
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.29)
CVE-2023-39999
CWE-863
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.28)
CVE-2023-2745
CWE-862
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.30)
CVE-2023-39999
CWE-863
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.29)
CVE-2023-2745
CWE-862
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.30)
CVE-2023-2745
CWE-862
High
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.21)
CVE-2017-17094
CWE-330
High
MongoDb Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2024-10921)
CVE-2024-10921
CWE-158
High
e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-50916)
CVE-2022-50916
CWE-434
High
Envoy Proxy CVE-2026-26310 Vulnerability (CVE-2026-26310)
CVE-2026-26310
-
High
Python Inefficient Regular Expression Complexity Vulnerability (CVE-2024-6232)
CVE-2024-6232
CWE-1333
High