Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23765 vulnerabilities in this category.

Critical: 1566 High: 12713 Medium: 8693 Low: 789 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress 4.0.x Arbitrary File Deletion Vulnerability (4.0 - 4.0.23)
CVE-2018-12895
CWE-73
High
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.21)
CVE-2017-17094
CWE-330
High
MongoDb Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2024-10921)
CVE-2024-10921
CWE-158
High
Wordpress Plugin Backup Migration Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-7002)
CVE-2023-7002
CWE-138
High
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.25)
CVE-2018-20153
CWE-915
High
WordPress 3.9.x Denial of Service Vulnerability (3.9 - 3.9.23)
CVE-2018-6389
CWE-400
High
WordPress 3.9.x Cross-Domain Flash Injection Vulnerability (3.9 - 3.9.22)
CVE-2018-5776
CWE-269
High
PostgreSQL Externally Controlled Reference to a Resource in Another Sphere Vulnerability (CVE-2024-10979)
CVE-2024-10979
CWE-610
High
PHP Out-of-bounds Write Vulnerability (CVE-2024-11233)
CVE-2024-11233
CWE-787
High
PHP Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2024-11234)
CVE-2024-11234
CWE-138
High
PHP Use After Free Vulnerability (CVE-2024-11235)
CVE-2024-11235
CWE-416
High
Drupal Core 8.x.x Security Bypass (8.0.0 - 8.6.18)
-
CWE-264
High
Drupal Core 8.x.x Security Bypass (8.0.0 - 8.7.14)
CVE-2020-13665
CWE-264
High
Drupal Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2024-11941)
CVE-2024-11941
CWE-835
High
Drupal Core 9.0.0 Remote Code Execution (9.0.0)
CVE-2020-13664
CWE-94
High
Drupal Core 9.0.0 Security Bypass (9.0.0)
CVE-2020-13665
CWE-264
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.19)
CVE-2018-10102
CWE-601
High
Wordpress Plugin Backup Migration CVE-2023-6271 Vulnerability (CVE-2023-6271)
CVE-2023-6271
-
High
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.17)
CVE-2017-17094
CWE-330
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2023-5869)
CVE-2023-5869
CWE-190
High
WordPress 4.2.x Denial of Service Vulnerability (4.2 - 4.2.19)
CVE-2018-6389
CWE-400
High
WordPress 4.2.x Cross-Domain Flash Injection Vulnerability (4.2 - 4.2.18)
CVE-2018-5776
CWE-269
High
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5965)
CVE-2023-5965
CWE-434
High
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5966)
CVE-2023-5966
CWE-434
High
WordPress 4.2.x Arbitrary File Deletion Vulnerability (4.2 - 4.2.20)
CVE-2018-12895
CWE-73
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.24)
CVE-2018-20153
CWE-915
High
Wordpress Plugin Backup Migration Files or Directories Accessible to External Parties Vulnerability (CVE-2023-6266)
CVE-2023-6266
CWE-552
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.20)
CVE-2017-17094
CWE-330
High
Drupal Core 9.0.x Information Disclosure (9.0.0 - 9.0.5)
CVE-2020-13670
CWE-200
High
WP Plugin Contact Form 7 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-6449)
CVE-2023-6449
CWE-434
High
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.22)
CVE-2018-10102
CWE-601
High
Drupal Core 9.0.x Security Bypass (9.0.0 - 9.0.5)
CVE-2020-13667
CWE-264
High
WordPress 4.1.x Denial of Service Vulnerability (4.1 - 4.1.22)
CVE-2018-6389
CWE-400
High
Drupal Core 9.0.x Multiple Cross-Site Scripting Vulnerabilities (9.0.0 - 9.0.5)
CVE-2020-13688
CWE-79
High
WordPress 4.1.x Cross-Domain Flash Injection Vulnerability (4.1 - 4.1.21)
CVE-2018-5776
CWE-269
High
WordPress 4.1.x Arbitrary File Deletion Vulnerability (4.1 - 4.1.23)
CVE-2018-12895
CWE-73
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.24)
CVE-2018-20153
CWE-915
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.20)
CVE-2017-17094
CWE-330
High
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.22)
CVE-2018-10102
CWE-601
High
Envoy Proxy CVE-2024-45810 Vulnerability (CVE-2024-45810)
CVE-2024-45810
-
High
Artifactory Deserialization of Untrusted Data Vulnerability (CVE-2026-65617)
CVE-2026-65617
CWE-502
High
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.6)
CVE-2020-28040
CWE-502
High
SharePoint Out-of-bounds Read Vulnerability (CVE-2025-59235)
CVE-2025-59235
CWE-125
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-35439)
CVE-2026-35439
CWE-502
High
WebLogic Improper Access Control Vulnerability (CVE-2026-35311)
CVE-2026-35311
CWE-284
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35303)
CVE-2026-35303
CWE-306
High
WebLogic URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-35302)
CVE-2026-35302
CWE-601
High
TYPO3 Missing Authorization Vulnerability (CVE-2025-59022)
CVE-2025-59022
CWE-862
High
SharePoint Use After Free Vulnerability (CVE-2025-59221)
CVE-2025-59221
CWE-416
High
SharePoint Use After Free Vulnerability (CVE-2025-59222)
CVE-2025-59222
CWE-416
High
SharePoint CVE-2025-59228 Vulnerability (CVE-2025-59228)
CVE-2025-59228
-
High
SharePoint Out-of-bounds Read Vulnerability (CVE-2025-59232)
CVE-2025-59232
CWE-125
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2025-59237)
CVE-2025-59237
CWE-502
High
Roundcube Deserialization of Untrusted Data Vulnerability (CVE-2026-35537)
CVE-2026-35537
CWE-502
High
CubeCart Insufficient Session Expiration Vulnerability (CVE-2025-59335)
CVE-2025-59335
CWE-613
High
Drupal Core 4.7.x Arbitrary Code Execution (4.7.0 - 4.7.5)
CVE-2007-0626
CWE-95
High
Drupal Core 4.6.x SQL Injection (4.6.0 - 4.6.6)
CVE-2006-2742
CWE-89
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35299)
CVE-2026-35299
CWE-306
High
Drupal Core 4.6.x Session Fixation (4.6.0 - 4.6.5)
-
CWE-384
High
Drupal Core 4.6.x Security Bypass (4.6.0 - 4.6.5)
-
CWE-264
High
Next.js Uncontrolled Resource Consumption Vulnerability (CVE-2025-59471)
CVE-2025-59471
CWE-400
High
Next.js Uncontrolled Resource Consumption Vulnerability (CVE-2025-59472)
CVE-2025-59472
CWE-400
High
Drupal Core 4.6.x Security Bypass (4.6.0 - 4.6.3)
CVE-2005-3974
CWE-264
High
TYPO3 Missing Authorization Vulnerability (CVE-2025-59017)
CVE-2025-59017
CWE-862
High
axios Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-58754)
CVE-2025-58754
CWE-770
High
WebLogic URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-35258)
CVE-2026-35258
CWE-601
High
Drupal Core 4.7.x Cross-Site Request Forgery (4.7.0 - 4.7.3)
CVE-2006-5476
CWE-352
High
React Deserialization of Untrusted Data Vulnerability (CVE-2025-55184)
CVE-2025-55184
CWE-502
High
Next.js Deserialization of Untrusted Data Vulnerability (CVE-2025-55184)
CVE-2025-55184
CWE-502
High
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.4)
CVE-2007-0136
CWE-79
High
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.10)
CVE-2008-0274
CWE-79
High
Serendipity Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-39971)
CVE-2026-39971
CWE-707
High
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.7)
CVE-2007-5596
CWE-79
High
XWikiplatform Relative Path Traversal Vulnerability (CVE-2025-55748)
CVE-2025-55748
CWE-23
High
XWikiplatform CVE-2025-55749 Vulnerability (CVE-2025-55749)
CVE-2025-55749
-
High