🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Missing Update
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Missing Update
This page lists
23765 vulnerabilities
in this category.
Critical: 1566
High: 12713
Medium: 8693
Low: 789
Information: 4
Vulnerability Name
CVE
CWE
Severity
Liferay Portal Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2024-25607)
CVE-2024-25607
CWE-916
High
WordPress 'get_edit_post_link()' and 'get_edit_comment_link()' Multiple Eavesdropping Vulnerabilities (0.6.2 - 2.6)
CVE-2008-3747
CWE-264
High
WordPress 2.5 Cookie Integrity Protection Unauthorized Access Vulnerability (0.6.2 - 2.5)
CVE-2008-1930
CWE-287
High
WordPress 'admin-ajax.php' SQL Injection Vulnerability (2.1.3)
CVE-2007-2821
CWE-89
High
WordPress 2.3.3 Directory Traversal Vulnerability (0.6.2 - 2.3.3)
CVE-2008-4769
CWE-22
High
WordPress 2.3.2 Post Edit Unauthorized Access Vulnerability (0.7 - 2.3.2)
CVE-2008-0664
CWE-264
High
WordPress 'wp-register.php' Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.0.1)
CVE-2007-5106
CWE-79
High
Squid Other Vulnerability (CVE-2024-25617)
CVE-2024-25617
-
High
Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-25978)
CVE-2024-25978
CWE-770
High
WordPress 'wp-db.php' Character Set SQL Injection Vulnerability (2.0 - 2.3.1)
CVE-2007-6318
CWE-89
High
WordPress 'templates.php' Cross-Site Scripting Vulnerability (0.6.2 - 2.1)
CVE-2007-1049
CWE-79
High
WordPress Pingback Source URI Denial of Service and Information Disclosure Vulnerabilities (0.6.2 - 2.1.3)
CVE-2007-0540
CWE-400
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-25982)
CVE-2024-25982
CWE-352
High
WordPress Cookies Security Bypass Weakness (1.5 - 2.3.1)
CVE-2007-6013
CWE-287
High
WordPress 3.6 Multiple Vulnerabilities (2.0 - 3.6)
CVE-2013-5739
CWE-264
High
WordPress 3.7.3 Multiple Vulnerabilities (3.7 - 3.7.3)
CVE-2014-5266
CWE-611
High
WordPress 'wp-trackback.php' SQL Injection Vulnerability (1.5)
CVE-2005-1687
CWE-89
High
Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-21514)
CVE-2024-21514
CWE-138
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.8)
CVE-2016-5839
CWE-400
High
WebLogic CVE-2024-21260 Vulnerability (CVE-2024-21260)
CVE-2024-21260
-
High
WordPress 4.2.x Cross-Site Scripting Vulnerability (4.2 - 4.2.5)
CVE-2016-1564
CWE-79
High
MySQL CVE-2024-21272 Vulnerability (CVE-2024-21272)
CVE-2024-21272
-
High
WebLogic CVE-2024-21274 Vulnerability (CVE-2024-21274)
CVE-2024-21274
-
High
SharePoint CVE-2024-21318 Vulnerability (CVE-2024-21318)
CVE-2024-21318
-
High
SharePoint CVE-2024-21426 Vulnerability (CVE-2024-21426)
CVE-2024-21426
-
High
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)
CVE-2024-21490
CWE-1333
High
Angular Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)
CVE-2024-21490
CWE-1333
High
WordPress 4.2.x Cross-Site Scripting Vulnerability (4.2 - 4.2.7)
CVE-2016-4567
CWE-79
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.9)
CVE-2016-7169
CWE-79
High
WordPress 4.1.x Same Origin Method Execution (SOME) Vulnerability (4.1 - 4.1.10)
CVE-2016-4566
CWE-79
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.12)
CVE-2016-7169
CWE-79
High
Opencart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-21518)
CVE-2024-21518
CWE-22
High
Opencart CVE-2024-21519 Vulnerability (CVE-2024-21519)
CVE-2024-21519
-
High
Craft CMS CVE-2024-21622 Vulnerability (CVE-2024-21622)
CVE-2024-21622
-
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.9)
CVE-2016-2222
CWE-918
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.11)
CVE-2016-5839
CWE-400
High
XWiki Improper Handling of Insufficient Privileges Vulnerability (CVE-2024-21648)
CVE-2024-21648
CWE-274
High
Drupal Core 8.x.x Cross-Site Request Forgery (8.0.0 - 8.7.14)
CVE-2020-13663
CWE-352
High
WordPress 4.1.x Cross-Site Scripting Vulnerability (4.1 - 4.1.8)
CVE-2016-1564
CWE-79
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.6)
CVE-2016-2222
CWE-918
High
WordPress 4.2.x Same Origin Method Execution (SOME) Vulnerability (4.2 - 4.2.7)
CVE-2016-4566
CWE-79
High
Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21673)
CVE-2024-21673
CWE-94
High
WordPress 4.4.x Same Origin Method Execution (SOME) Vulnerability (4.4 - 4.4.2)
CVE-2016-4566
CWE-79
High
WordPress Multiple Vulnerabilities (0.70 - 3.6.1)
CVE-2016-5839
CWE-400
High
WordPress Cross-Site Scripting Vulnerability (0.70 - 3.7.11)
CVE-2016-1564
CWE-79
High
WordPress 4.6 Multiple Vulnerabilities (4.6)
CVE-2016-7169
CWE-79
High
WordPress 4.5.x Same Origin Method Execution (SOME) Vulnerability (4.5 - 4.5.1)
CVE-2016-4566
CWE-79
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.3)
CVE-2016-7169
CWE-79
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.2)
CVE-2016-5839
CWE-400
High
WordPress 4.5.x Cross-Site Scripting Vulnerability (4.5 - 4.5.1)
CVE-2016-4567
CWE-79
High
Drupal Core 8.x.x Cross-Site Scripting (8.0.0 - 8.6.18)
CVE-2020-11023
CWE-79
High
WordPress 4.5.3 Directory Traversal Vulnerability (4.5.3)
CVE-2016-10148
CWE-22
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.1)
CVE-2016-2222
CWE-918
High
WordPress 4.3.x Cross-Site Scripting Vulnerability (4.3 - 4.3.1)
CVE-2016-1564
CWE-79
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.4)
CVE-2016-7169
CWE-79
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.3)
CVE-2016-5839
CWE-400
High
WordPress 4.4.x Cross-Site Scripting Vulnerability (4.4 - 4.4.2)
CVE-2016-4567
CWE-79
High
WordPress 4.4 Cross-Site Scripting Vulnerability (4.4)
CVE-2016-1564
CWE-79
High
WebLogic CVE-2024-21234 Vulnerability (CVE-2024-21234)
CVE-2024-21234
-
High
WordPress 4.3.x Same Origin Method Execution (SOME) Vulnerability (4.3 - 4.3.3)
CVE-2016-4566
CWE-79
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.4)
CVE-2016-5839
CWE-400
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.2)
CVE-2016-2222
CWE-918
High
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.5)
CVE-2016-7169
CWE-79
High
WordPress 4.3.x Cross-Site Scripting Vulnerability (4.3 - 4.3.3)
CVE-2016-4567
CWE-79
High
Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21672)
CVE-2024-21672
CWE-94
High
Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21674)
CVE-2024-21674
CWE-94
High
WordPress 3.7.4 Multiple Vulnerabilities (3.7 - 3.7.4)
CVE-2014-9039
CWE-918
High
WordPress Cross-Site Scripting Vulnerability (3.0 - 3.6.1)
CVE-2014-9031
CWE-79
High
WordPress Multiple Cross-Site Scripting Vulnerabilities (4.1 - 4.2.1)
CVE-2015-8834
CWE-79
High
WordPress Cross-Site Scripting Vulnerability (3.9 - 4.1.1)
CVE-2015-3439
CWE-79
High
Plone CMS Incorrect Default Permissions Vulnerability (CVE-2024-22889)
CVE-2024-22889
CWE-276
High
WordPress Cross-Site Scripting Vulnerability (3.9.3 - 4.2)
CVE-2015-3440
CWE-79
High
WordPress Cross-Site Scripting Vulnerability (0.70 - 4.1.1)
CVE-2015-3438
CWE-79
High
WordPress 4.3 Multiple Vulnerabilities (0.7 - 4.3)
CVE-2015-7989
CWE-264
High
WordPress 4.2.3 Multiple Vulnerabilities (0.7 - 4.2.3)
CVE-2015-5734
CWE-264
High
«
1
...
64
65
66
...
317
»