Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Stop User Enumeration User Enumeration (1.2.4)
-
CWE-203
High
WordPress Plugin Search Everything SQL Injection (7.0.2)
CVE-2014-2316
CWE-89
High
PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2021-32027)
CVE-2021-32027
CWE-119
High
Jboss EAP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2021-32027)
CVE-2021-32027
CWE-119
High
WordPress Plugin Relevanssi-A Better Search SQL Injection (3.2)
-
CWE-89
High
WordPress Plugin Print, PDF, Email by PrintFriendly Multiple Cross-Site Scripting Vulnerabilities (3.3.7)
-
CWE-79
High
WordPress Plugin Nokia Maps & Places Cross-Site Scripting (1.6.6)
CVE-2014-1750
CWE-79
High
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-32036)
CVE-2021-32036
CWE-770
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.0.0)
-
CWE-22
High
MongoDb Out-of-bounds Write Vulnerability (CVE-2021-32040)
CVE-2021-32040
CWE-787
High
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-31950)
CVE-2021-31950
CWE-918
High
WordPress Plugin Media File Renamer-Auto & Manual Rename Cross-Site Scripting (1.7.0)
CVE-2014-2040
CWE-79
High
Ruby Inadequate Encryption Strength Vulnerability (CVE-2021-32066)
CVE-2021-32066
CWE-326
High
WordPress Plugin MailPoet Newsletters (Previous) Arbitrary File Upload (2.6.7)
CVE-2014-4726
CWE-434
High
WordPress Plugin LayerSlider Cross-Site Request Forgery (4.6.1)
-
CWE-352
High
WordPress Plugin iTwitter Multiple Vulnerabilities (0.04)
CVE-2014-9336
CWE-352
High
WordPress Plugin InfiniteWP Client Security Bypass (1.3.7)
-
CWE-264
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-32474)
CVE-2021-32474
CWE-138
High
WordPress Plugin Google Doc Embedder SQL Injection (2.5.16)
CVE-2014-9173
CWE-89
High
Moodle Uncontrolled Resource Consumption Vulnerability (CVE-2021-32476)
CVE-2021-32476
CWE-400
High
WordPress Plugin Google Analytics MU Cross-Site Request Forgery (2.3.1)
-
CWE-352
High
SharePoint CVE-2021-31963 Vulnerability (CVE-2021-31963)
CVE-2021-31963
-
High
SharePoint CVE-2021-31948 Vulnerability (CVE-2021-31948)
CVE-2021-31948
-
High
WordPress Plugin AskApache Firefox Adsense Cross-Site Request Forgery (3.0)
CVE-2013-6992
CWE-352
High
WordPress Plugin Zedity:The Easiest Way To Create Posts & Pages Cross-Site Scripting (2.5.0)
-
CWE-79
High
WordPress Plugin April's Super Functions Pack Cross-Site Scripting (1.4.7)
CVE-2014-100026
CWE-79
High
WordPress Plugin Appointments Scheduler Cross-Site Scripting (1.5)
CVE-2014-4579
CWE-79
High
WordPress Plugin Another WordPress Classifieds Cross-Site Scripting (3.3.1)
CVE-2014-9313
CWE-79
High
WordPress Plugin Animal Captcha Cross-Site Scripting (1.6.2)
-
CWE-79
High
Sqlite Out-of-bounds Read Vulnerability (CVE-2021-31239)
CVE-2021-31239
CWE-125
High
Django Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-31542)
CVE-2021-31542
CWE-434
High
WordPress Plugin All in One Social Lite Server-Side Request Forgery (1.0)
-
CWE-918
High
WordPress Plugin Ajax Store Locator Directory Traversal (1.2.0)
-
CWE-22
High
WordPress Plugin Advanced Dewplayer Directory Traversal (1.2)
CVE-2013-7240
CWE-22
High
WordPress Plugin Ad-minister Cross-Site Scripting (0.6)
CVE-2013-6993
CWE-79
High
WordPress Plugin WP Symposium Arbitrary File Upload (14.11)
CVE-2014-10021
CWE-434
High
Chamilo Improper Input Validation Vulnerability (CVE-2021-31933)
CVE-2021-31933
CWE-20
High
WordPress Plugin WP Social Invitations Cross-Site Scripting (1.4.4.2)
CVE-2014-4597
CWE-79
High
WordPress Plugin WP Post to PDF Cross-Site Scripting (2.3.1)
-
CWE-79
High
WordPress Plugin WordPress Download Manager Remote Code Execution (2.7.4)
-
CWE-94
High
WordPress Plugin WordPress Download Manager Cross-Site Scripting (2.5.8)
CVE-2013-7319
CWE-79
High
MediaWiki Improper Input Validation Vulnerability (CVE-2021-31555)
CVE-2021-31555
CWE-20
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-31618)
CVE-2021-31618
CWE-476
High
WordPress Plugin WooCommerce SagePay Direct Payment Gateway Multiple Cross-Site Scripting Vulnerabilities (0.1.6.6)
CVE-2014-4549
CWE-79
High
WordPress Plugin Widget Control Powered By Everyblock Cross-Site Scripting (1.0.1)
-
CWE-79
High
WordPress Plugin Welcart e-Commerce Multiple Vulnerabilities (1.3.12)
CVE-2014-10017
CWE-89
High
WordPress Plugin Subscribe To Comments Reloaded Multiple Vulnerabilities (140204)
CVE-2014-2274
CWE-352
High
WordPress Plugin NEX-Forms Lite-WordPress Contact Form builder Cross-Site Scripting (2.1.0)
CVE-2014-7151
CWE-79
High
WordPress Plugin mTouch Quiz Multiple Vulnerabilities (3.0.6)
CVE-2014-100023
CWE-89
High
WordPress Plugin IP Ban Cross-Site Request Forgery (1.2.3)
CVE-2014-9413
CWE-352
High
Jboss EAP Files or Directories Accessible to External Parties Vulnerability (CVE-2021-3717)
CVE-2021-3717
CWE-552
High
WordPress Plugin Frontend File Manager Arbitrary File Upload (3.3)
CVE-2014-5324
CWE-94
High
Nginx Improper Certificate Validation Vulnerability (CVE-2021-3618)
CVE-2021-3618
CWE-295
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)
CVE-2021-3629
CWE-400
High
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)
CVE-2021-3629
CWE-400
High
WordPress Plugin EWWW Image Optimizer Cross-Site Scripting (2.0.1)
CVE-2014-6243
CWE-79
High
WordPress Plugin Easy Forms for Mailchimp Cross-Site Scripting (5.0.6)
CVE-2014-7152
CWE-79
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690)
CVE-2021-3690
CWE-400
High
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690)
CVE-2021-3690
CWE-400
High
OpenSSL Out-of-bounds Read Vulnerability (CVE-2021-3712)
CVE-2021-3712
CWE-125
High
WordPress Plugin DZS Video Gallery Multiple Cross-Site Scripting Vulnerabilities (All)
CVE-2014-9094
CWE-79
High
WordPress Plugin Google Calendar Events Cross-Site Scripting (2.0.3.1)
CVE-2014-7138
CWE-79
High
YOURLS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2021-3734)
CVE-2021-3734
CWE-1021
High
Python Uncontrolled Resource Consumption Vulnerability (CVE-2021-3737)
CVE-2021-3737
CWE-400
High
axios Uncontrolled Resource Consumption Vulnerability (CVE-2021-3749)
CVE-2021-3749
CWE-400
High
WordPress Plugin Download Shortcode Local File Inclusion (0.2.3)
CVE-2014-5465
CWE-22
High
WordPress Plugin Disqus Comment System Multiple Vulnerabilities (2.75)
CVE-2014-5347
CWE-352
High
WordPress Plugin Disqus Comment System Multiple Cross-Site Request Forgery Vulnerabilities (2.77)
CVE-2014-5346
CWE-352
High
Undertow Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-3859)
CVE-2021-3859
CWE-668
High
Jboss EAP Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-3859)
CVE-2021-3859
CWE-668
High
WordPress Plugin Creative Contact Form-The Best WordPress Contact Form Builder Arbitrary File Upload (0.9.7)
CVE-2014-7969
CWE-94
High
Elgg Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2021-3980)
CVE-2021-3980
CWE-359
High
WordPress Plugin Gallery-Photo Albums-Portfolio Multiple Cross-Site Request Forgery Vulnerabilities (1.2.59)
-
CWE-352
High
WordPress Plugin Google Maps Ready! Cross-Site Request Forgery (1.1.5)
-
CWE-352
High
WordPress Plugin Contact Form DB Multiple Cross-Site Scripting Vulnerabilities (2.8.15)
CVE-2014-7139
CWE-79
High