Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23409 vulnerabilities in this category.

Critical: 1513 High: 12591 Medium: 8518 Low: 783 Information: 4
Vulnerability Name
CVE
CWE
Severity
Undertow Unchecked Return Value Vulnerability (CVE-2022-1319)
CVE-2022-1319
CWE-252
High
WordPress Plugin Hitasoft FLV Player 'id' Parameter SQL Injection (1.1)
-
CWE-89
High
WordPress Plugin FB Survey Pro 'id' Parameter SQL Injection (1.0)
-
CWE-89
High
WordPress Plugin Carousel slideshow 'swfupload.swf' Cross-Site Scripting (3.10)
CVE-2012-3414
CWE-79
High
OpenSSL Incomplete Cleanup Vulnerability (CVE-2022-1473)
CVE-2022-1473
CWE-459
High
WordPress Plugin FireStorm Professional Real Estate Multiple SQL Injection Vulnerabilities (2.05.01)
-
CWE-89
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-1552)
CVE-2022-1552
CWE-138
High
WordPress Plugin Advanced Custom Fields (ACF) 'acf_abspath' Parameter Remote File Include (3.5.1)
-
CWE-94
High
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (3.3.5)
-
CWE-79
High
WordPress Plugin White Label CMS Cross-Site Request Forgery (1.5)
CVE-2012-5388
CWE-352
High
WordPress Plugin UnGallery 'search' Parameter Remote Arbitrary Command Execution (2.1.5)
-
CWE-95
High
WordPress Plugin Spider Calendar Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.1)
-
CWE-89
High
WordPress Plugin Social Discussions Remote File Include and Information Disclosure Vulnerabilities (6.1.1)
-
CWE-200
High
WordPress Plugin Slideshow Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities (2.1.12)
-
CWE-200
High
WordPress Plugin Gallery-Flagallery Photo Portfolio Multiple Vulnerabilities (2.00)
-
CWE-94
High
WordPress Plugin FoxyPress Multiple Vulnerabilities (0.4.2.5)
-
CWE-434
High
WordPress Plugin FoxyPress 'uploadify.php' Arbitrary File Upload (0.4.2.1)
-
CWE-434
High
MySQL CVE-2022-21600 Vulnerability (CVE-2022-21600)
CVE-2022-21600
-
High
WordPress Plugin Verve Meta Boxes TimThumb Arbitrary File Upload (1.2.8)
CVE-2011-4106
CWE-20
High
WordPress Plugin Mailing List 'dl.php' Arbitrary File Download (1.4.1)
-
CWE-22
High
WordPress Plugin WP Symposium Arbitrary File Upload Vulnerabilities (11.11.26)
CVE-2011-5051
CWE-434
High
WordPress Plugin UPM Polls 'PID' Parameter SQL Injection (1.0.4)
-
CWE-89
High
WordPress Plugin TheCartPress eCommerce Shopping Cart 'OptionsPostsList.php' Cross-Site Scripting (1.1.6)
CVE-2011-5207
CWE-79
High
WordPress Plugin The Welcomizer 'twiz-index.php' Cross-Site Scripting (1.3.9.4)
-
CWE-79
High
GibbonEdu Session Fixation Vulnerability (CVE-2022-27305)
CVE-2022-27305
CWE-384
High
Chamilo Improper Privilege Management Vulnerability (CVE-2022-27421)
CVE-2022-27421
CWE-269
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking 'pretty-bar.php' Cross-Site Scripting (1.5.2)
-
CWE-79
High
WordPress Plugin s2Member Framework 's2_invoice' Parameter Remote Security Bypass (111105)
-
CWE-264
High
Chamilo Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-27426)
CVE-2022-27426
CWE-918
High
Chamilo Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-27427)
CVE-2022-27427
CWE-94
High
WordPress Plugin Lazyest Backup 'xml_or_all' Parameter Cross-Site Scripting (0.2.1)
CVE-2011-5264
CWE-79
High
WordPress Plugin AllWebMenus WordPress Menu 'actions.php' Arbitrary File Upload (1.1.8)
CVE-2012-1011
CWE-264
High
WordPress Plugin Gallery-Flagallery Photo Portfolio 'flagshow.php' Cross-Site Scripting (1.57)
-
CWE-79
High
WordPress Plugin ZooEffect for Video player Photo Gallery Slideshow jQuery and audio/music/podcast-HTML Cross-Site Scripting (1.01)
CVE-2011-5180
CWE-79
High
WordPress Plugin Zingiri Web Shop 'ajax_save_name.php' Remote Code Execution (2.2.3)
-
CWE-95
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2022-28129)
CVE-2022-28129
CWE-20
High
WordPress Plugin WP eCommerce HTML Injection (3.8.7.1)
CVE-2011-5104
CWE-79
High
WordPress Plugin Skysa App Bar Integration 'submit' Parameter Cross-Site Scripting (1.03)
CVE-2011-5179
CWE-79
High
MediaWiki Release of Invalid Pointer or Reference Vulnerability (CVE-2022-28203)
CVE-2022-28203
CWE-763
High
MediaWiki CVE-2022-28204 Vulnerability (CVE-2022-28204)
CVE-2022-28204
-
High
MediaWiki CVE-2022-28323 Vulnerability (CVE-2022-28323)
CVE-2022-28323
-
High
WordPress Plugin Newsletter Meenews 'idnews' Parameter Cross-Site Scripting (5.1.0)
-
CWE-79
High
WordPress Plugin Age Verification 'redirect_to' Parameter URI Redirection (0.4)
CVE-2012-6499
CWE-20
High
WordPress Plugin Comment Rating 'path' Parameter Cross-Site Scripting (2.9.20)
-
CWE-79
High
WordPress Plugin Featurific For WordPress 'snum' Parameter Cross-Site Scripting (1.6.2)
CVE-2011-5265
CWE-79
High
Apache Tomcat Improper Resource Shutdown or Release Vulnerability (CVE-2022-25762)
CVE-2022-25762
CWE-404
High
Drupal Improper Input Validation Vulnerability (CVE-2022-25273)
CVE-2022-25273
CWE-20
High
WordPress Plugin Shortcode Redirect 'domain' Parameter Cross-Site Scripting (1.0.01)
CVE-2012-5325
CWE-79
High
Drupal Other Vulnerability (CVE-2022-25275)
CVE-2022-25275
-
High
WordPress Plugin Pay With Tweet SQL Injection and Cross-Site Scripting Vulnerabilities (1.1)
CVE-2012-5350
CWE-89
High
Drupal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-25277)
CVE-2022-25277
CWE-434
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple HTML Injection Vulnerabilities (1.9.0)
-
CWE-79
High
WordPress Plugin myEASYbackup 'dwn_file' Parameter Directory Traversal (1.0.8.1)
CVE-2012-0898
CWE-22
High
Oracle HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-25314)
CVE-2022-25314
CWE-190
High
WordPress Plugin My Calendar Multiple Cross-Site Scripting Vulnerabilities (1.10.1)
CVE-2012-6527
CWE-79
High
WordPress Plugin Mingle Forum Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.32.1)
CVE-2012-5328
CWE-89
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2022-25763)
CVE-2022-25763
CWE-20
High
WordPress Plugin Count per Day Arbitrary File Download and Cross-Site Scripting Vulnerabilities (3.1)
CVE-2012-0896
CWE-79
High
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2022-25844)
CVE-2022-25844
CWE-1333
High
WordPress Plugin Kish Guest Posting 'uploadify.php' Arbitrary File Upload (1.2)
CVE-2012-5318
CWE-434
High
UAParser.js Inefficient Regular Expression Complexity Vulnerability (CVE-2022-25927)
CVE-2022-25927
CWE-1333
High
MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-26149)
CVE-2022-26149
CWE-434
High
qdPM Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-26180)
CVE-2022-26180
CWE-352
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-26266)
CVE-2022-26266
CWE-138
High
Piwigo Exposure of Resource to Wrong Sphere Vulnerability (CVE-2022-26267)
CVE-2022-26267
CWE-668
High
Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2022-26377)
CVE-2022-26377
CWE-444
High
Python Untrusted Search Path Vulnerability (CVE-2022-26488)
CVE-2022-26488
CWE-426
High
AbanteCart Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-26521)
CVE-2022-26521
CWE-434
High
WordPress Plugin Gallery-Flagallery Photo Portfolio 'facebook.php' Cross-Site Scripting (1.56)
CVE-2011-4624
CWE-79
High
Ruby Out-of-bounds Read Vulnerability (CVE-2022-28739)
CVE-2022-28739
CWE-125
High
WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking 'slug' Parameter Cross-Site Scripting (1.5.5)
CVE-2011-5192
CWE-79
High
WordPress Plugin WP eCommerce 'cs1' Parameter SQL Injection (3.8.6)
-
CWE-89
High
Apache Tomcat CVE-2022-29885 Vulnerability (CVE-2022-29885)
CVE-2022-29885
-
High
WordPress Plugin Zingiri Web Shop 'wpabspath' Parameter Remote File Include (2.2.0)
-
CWE-94
High
WordPress Plugin wpcu3er 'ajaxReq.php' Arbitrary File Upload (0.55)
-
CWE-434
High