Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23409 vulnerabilities in this category.

Critical: 1513 High: 12591 Medium: 8518 Low: 783 Information: 4
Vulnerability Name
CVE
CWE
Severity
Apache HTTP Server Out-of-bounds Read Vulnerability (CVE-2023-31122)
CVE-2023-31122
CWE-125
High
WordPress 5.5.x Prototype Pollution (5.5 - 5.5.8)
CVE-2021-20083
CWE-1321
High
WordPress Ultimate Member Plugin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-31216)
CVE-2023-31216
CWE-352
High
WordPress 5.1.x Prototype Pollution (5.1 - 5.1.12)
CVE-2021-20083
CWE-1321
High
SharePoint CVE-2023-33159 Vulnerability (CVE-2023-33159)
CVE-2023-33159
-
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-35150)
CVE-2023-35150
CWE-94
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.24)
CVE-2022-21664
CWE-915
High
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.21)
CVE-2022-21664
CWE-915
High
Liferay Portal Missing Authorization Vulnerability (CVE-2023-33948)
CVE-2023-33948
CWE-862
High
Liferay Portal Insecure Default Initialization of Resource Vulnerability (CVE-2023-33949)
CVE-2023-33949
CWE-1188
High
Liferay DXP Insecure Default Initialization of Resource Vulnerability (CVE-2023-33949)
CVE-2023-33949
CWE-1188
High
Liferay Portal Inefficient Regular Expression Complexity Vulnerability (CVE-2023-33950)
CVE-2023-33950
CWE-1333
High
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.23)
-
CWE-89
High
XWiki Improper Privilege Management Vulnerability (CVE-2023-34465)
CVE-2023-34465
CWE-269
High
WordPress 4.5.x Prototype Pollution (4.5 - 4.5.25)
CVE-2021-20083
CWE-1321
High
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-34467)
CVE-2023-34467
CWE-668
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.26)
-
CWE-89
High
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.27)
CVE-2022-43504
CWE-601
High
WordPress 4.6.x Prototype Pollution (4.6 - 4.6.22)
CVE-2021-20083
CWE-1321
High
WordPress 4.4.x Prototype Pollution (4.4 - 4.4.26)
CVE-2021-20083
CWE-1321
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.28)
CVE-2022-43504
CWE-601
High
Chamilo Other Vulnerability (CVE-2023-34962)
CVE-2023-34962
-
High
Apache Tomcat CVE-2023-34981 Vulnerability (CVE-2023-34981)
CVE-2023-34981
-
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.25)
CVE-2022-21664
CWE-915
High
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-35030)
CVE-2023-35030
CWE-352
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.27)
-
CWE-89
High
WordPress 4.3.x Prototype Pollution (4.3 - 4.3.27)
CVE-2021-20083
CWE-1321
High
Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-35133)
CVE-2023-35133
CWE-918
High
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-35141)
CVE-2023-35141
CWE-352
High
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.24)
CVE-2022-43504
CWE-601
High
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.24)
CVE-2022-43504
CWE-601
High
SharePoint CVE-2023-33160 Vulnerability (CVE-2023-33160)
CVE-2023-33160
-
High
WordPress 4.9.x Prototype Pollution (4.9 - 4.9.19)
CVE-2021-20083
CWE-1321
High
SharePoint CVE-2023-33165 Vulnerability (CVE-2023-33165)
CVE-2023-33165
-
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.14)
CVE-2022-43504
CWE-601
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.11)
CVE-2022-21664
CWE-915
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.13)
-
CWE-89
High
WordPress 5.0.x Prototype Pollution (5.0 - 5.0.15)
CVE-2021-20083
CWE-1321
High
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.14)
CVE-2022-21664
CWE-915
High
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.17)
CVE-2022-43504
CWE-601
High
Dolibarr Files or Directories Accessible to External Parties Vulnerability (CVE-2023-33568)
CVE-2023-33568
CWE-552
High
Apache Traffic Server CVE-2023-33933 Vulnerability (CVE-2023-33933)
CVE-2023-33933
-
High
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.16)
-
CWE-89
High
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.20)
-
CWE-89
High
Liferay DXP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-33945)
CVE-2023-33945
CWE-138
High
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.18)
CVE-2022-21664
CWE-915
High
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.21)
CVE-2022-43504
CWE-601
High
WordPress 4.8.x Prototype Pollution (4.8 - 4.8.18)
CVE-2021-20083
CWE-1321
High
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.19)
-
CWE-89
High
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.17)
CVE-2022-21664
CWE-915
High
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.20)
CVE-2022-43504
CWE-601
High
WordPress 4.7.x Prototype Pollution (4.7 - 4.7.22)
CVE-2021-20083
CWE-1321
High
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.21)
CVE-2022-21664
CWE-915
High
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.23)
-
CWE-89
High
Liferay Portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-33945)
CVE-2023-33945
CWE-138
High
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.3)
CVE-2016-5839
CWE-400
High
WordPress 4.4 Cross-Site Scripting Vulnerability (4.4)
CVE-2016-1564
CWE-79
High
WordPress Plugin WassUp Real Time Analytics 'spy.php' SQL Injection (1.4.3)
CVE-2008-0520
CWE-89
High
Chamilo Use of Insufficiently Random Values Vulnerability (CVE-2026-33710)
CVE-2026-33710
CWE-330
High
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-3586)
CVE-2025-3586
CWE-863
High
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-3625)
CVE-2025-3625
CWE-639
High
Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-33940)
CVE-2026-33940
CWE-94
High
Handlebars Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-33939)
CVE-2026-33939
CWE-754
High
Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-33938)
CVE-2026-33938
CWE-94
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-3638)
CVE-2025-3638
CWE-352
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-3641)
CVE-2025-3641
CWE-94
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-3642)
CVE-2025-3642
CWE-94
High
EspoCRM Relative Path Traversal Vulnerability (CVE-2026-33733)
CVE-2026-33733
CWE-23
High
Chamilo Improper Privilege Management Vulnerability (CVE-2026-33706)
CVE-2026-33706
CWE-269
High
Handlebars Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33941)
CVE-2026-33941
CWE-707
High
LimeSurvey Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2025-41074)
CVE-2025-41074
CWE-835
High
LimeSurvey Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2025-41075)
CVE-2025-41075
CWE-835
High
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-33704)
CVE-2026-33704
CWE-434
High
Chamilo Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33702)
CVE-2026-33702
CWE-639
High
Squid Use After Free Vulnerability (CVE-2026-33526)
CVE-2026-33526
CWE-416
High