Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Malware Finder Cross-Site Scripting (1.1)
CVE-2014-4538
CWE-79
High
Atlassian Jira Improper Authentication Vulnerability (CVE-2021-26070)
CVE-2021-26070
CWE-287
High
WordPress Plugin Local Weather Cross-Site Scripting (1.0)
CVE-2014-4561
CWE-79
High
WordPress Plugin Last.fm Rotation Local File Inclusion (1.0)
CVE-2014-5181
CWE-22
High
WordPress Plugin Kindeditor For WordPress Cross-Site Scripting (1.3.3)
-
CWE-79
High
WordPress Plugin jRSS Widget Server-Side Request Forgery (1.2)
CVE-2014-9292
CWE-918
High
WordPress Plugin Infusionsoft Gravity Forms Add-on Multiple Cross-Site Scripting Vulnerabilities (1.5.6)
CVE-2014-4536
CWE-79
High
Joomla Improper Input Validation Vulnerability (CVE-2021-26036)
CVE-2021-26036
CWE-20
High
WordPress Plugin Import Legacy Media Cross-Site Scripting (0.1)
CVE-2014-4535
CWE-79
High
Joomla Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-26038)
CVE-2021-26038
CWE-754
High
WordPress Plugin Image Metadata Cruncher Multiple Vulnerabilities (1.8)
CVE-2015-1614
CWE-352
High
WordPress Plugin HTML5 Video Player with Playlist Multiple Cross-Site Scripting Vulnerabilities (2.40)
CVE-2014-4534
CWE-79
High
WordPress Plugin EMC2 Custom Help Videos Cross-Site Scripting (1.2)
-
CWE-79
High
UAParser.js Other Vulnerability (CVE-2021-27292)
CVE-2021-27292
-
High
Envoy Proxy Integer Overflow or Wraparound Vulnerability (CVE-2021-28682)
CVE-2021-28682
CWE-190
High
WordPress Plugin Banner Effect Header Cross-Site Scripting (1.2.7)
CVE-2015-1384
CWE-79
High
b2evolution Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2021-28242)
CVE-2021-28242
CWE-138
High
WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.3)
-
CWE-434
High
WordPress Plugin CBI Referral Manager Cross-Site Scripting (1.2.1)
CVE-2014-4517
CWE-79
High
WordPress Plugin Cart66 Lite::WordPress Ecommerce Cross-Site Scripting (1.5.4)
-
CWE-79
High
Seo Panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-28419)
CVE-2021-28419
CWE-138
High
WordPress Plugin Calendar by WD-Responsive Event Calendar for WordPress SQL Injection (1.4.9)
CVE-2015-2196
CWE-89
High
WordPress Plugin BookX Local File Inclusion (1.7)
CVE-2014-4937
CWE-22
High
WordPress Plugin Blue Wrench Video Widget Cross-Site Request Forgery (1.0.5)
CVE-2013-6797
CWE-352
High
WordPress Plugin BIC Media Widget Cross-Site Scripting (1.0)
CVE-2014-4516
CWE-79
High
SharePoint CVE-2021-28478 Vulnerability (CVE-2021-28478)
CVE-2021-28478
-
High
WordPress Plugin AnyFont Cross-Site Scripting (2.2.3)
CVE-2014-4515
CWE-79
High
WordPress Plugin Contact Form DB Cross-Site Scripting (2.8.27)
CVE-2015-2040
CWE-79
High
WordPress Plugin All Video Gallery SQL Injection (1.2)
CVE-2014-5186
CWE-89
High
WordPress Plugin All-in-One Event Calendar Multiple Vulnerabilities (1.10-standard)
-
CWE-89
High
Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-9840)
CVE-2017-9840
CWE-434
High
Magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-28584)
CVE-2021-28584
CWE-22
High
WordPress Plugin AdPlugg WordPress Ad Cross-Site Scripting (1.1.33)
-
CWE-79
High
Squid Uncontrolled Resource Consumption Vulnerability (CVE-2021-28651)
CVE-2021-28651
CWE-400
High
WordPress Plugin ActiveHelper LiveHelp Live Chat Multiple Cross-Site Scripting Vulnerabilities (3.1.0)
CVE-2014-4513
CWE-79
High
WordPress Plugin Acobot Live Chat & Contact Form Multiple Vulnerabilities (2.0)
CVE-2015-2039
CWE-352
High
WordPress Plugin yURL ReTwitt Cross-Site Request Forgery (1.4)
CVE-2014-9341
CWE-352
High
WordPress Plugin Wu-Rating Cross-Site Scripting (1.0 12319)
CVE-2014-4601
CWE-79
High
WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.2)
-
CWE-434
High
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2021-28165)
CVE-2021-28165
CWE-400
High
Kong Server Incorrect Authorization Vulnerability (CVE-2021-27306)
CVE-2021-27306
CWE-863
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27946)
CVE-2021-27946
CWE-138
High
Grafana CVE-2021-27358 Vulnerability (CVE-2021-27358)
CVE-2021-27358
-
High
WordPress Plugin eBay Feeds for WordPress Cross-Site Scripting (1.0)
CVE-2014-4525
CWE-79
High
Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2021-27577)
CVE-2021-27577
CWE-444
High
WordPress Plugin Easy Social Icons Multiple Vulnerabilities (1.2.2)
CVE-2015-2084
CWE-352
High
Pega Infinity Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-27654)
CVE-2021-27654
CWE-640
High
Apache Traffic Server Remote DOS Attack (CVE-2021-27737)
CVE-2021-27737
-
High
e107 Inadequate Encryption Strength Vulnerability (CVE-2021-27885)
CVE-2021-27885
CWE-326
High
WordPress Plugin Easy Career Openings Cross-Site Scripting (0.4)
CVE-2014-4523
CWE-79
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27890)
CVE-2021-27890
CWE-138
High
WordPress Plugin Easing Slider Multiple Cross-Site Scripting Vulnerabilities (2.2.0.6)
CVE-2015-1436
CWE-79
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27947)
CVE-2021-27947
CWE-138
High
Jenkins Uncontrolled Resource Consumption Vulnerability (CVE-2021-28165)
CVE-2021-28165
CWE-400
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27948)
CVE-2021-27948
CWE-138
High
WordPress Plugin Duplicator-WordPress Migration Security Bypass (0.5.8)
CVE-2014-9262
CWE-264
High
Grafana Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-27962)
CVE-2021-27962
CWE-732
High
WordPress Plugin dsSearchAgent:WordPress Edition Cross-Site Scripting (1.0-beta10)
CVE-2014-4522
CWE-79
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27973)
CVE-2021-27973
CWE-138
High
WordPress Plugin dsIDXpress IDX Cross-Site Scripting (2.1.0)
CVE-2014-4521
CWE-79
High
WordPress Plugin DMCA WaterMarker Cross-Site Scripting (1.0)
CVE-2014-4520
CWE-79
High
WordPress Plugin CrossSlide jQuery Multiple Vulnerabilities (2.0.5)
CVE-2015-2089
CWE-352
High
Grafana Improper Authentication Vulnerability (CVE-2021-28148)
CVE-2021-28148
CWE-287
High
WordPress Plugin Conversador Cross-Site Scripting (2.61)
CVE-2014-4519
CWE-79
High
SharePoint CVE-2021-41344 Vulnerability (CVE-2021-41344)
CVE-2021-41344
-
High
WordPress Plugin Google Analytics Dashboard SQL Injection (2.0.4)
-
CWE-89
High
WordPress Plugin Mingle Forum SQL Injection and Security Bypass Vulnerabilities (1.0.26)
-
CWE-425
High
WordPress Plugin LiveSig 'wp-root' Parameter Remote File Include (0.4)
-
CWE-94
High
WordPress Plugin oQey Gallery 'gal_id' Parameter SQL Injection (0.4.8)
-
CWE-89
High
WordPress Plugin Multisite Global Search 'mssearch' Parameter Cross-Site Scripting (1.2.5)
-
CWE-79
High
WordPress Plugin Mini Mail Dashboard Widget 'abspath' Parameter Remote File Include (1.36)
-
CWE-94
High
XWiki CVE-2022-31166 Vulnerability (CVE-2022-31166)
CVE-2022-31166
-
High
WordPress Plugin Mingle Forum 'edit_post_id' Parameter SQL Injection (1.0.31)
-
CWE-89
High
WordPress Plugin MediaRSS external gallery TimThumb Arbitrary File Upload (0.1)
CVE-2011-4106
CWE-20
High
PHP Release of Invalid Pointer or Reference Vulnerability (CVE-2022-31625)
CVE-2022-31625
CWE-763
High