Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-24734)
CVE-2022-24734
CWE-94
High
WordPress Plugin Absolute Privacy 'abpr_authenticateUser()' Security Bypass (2.0.5)
-
CWE-264
High
Moment.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-24785)
CVE-2022-24785
CWE-22
High
Twisted Web HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2022-24801)
CVE-2022-24801
CWE-444
High
WordPress Plugin YouSayToo auto-publishing 'submit' Parameter Cross-Site Scripting (1.0.1)
CVE-2012-0901
CWE-79
High
WordPress Plugin WPtouch Cross-Site Request Forgery (1.9.31)
-
CWE-352
High
XWiki Incorrect Use of Privileged APIs Vulnerability (CVE-2022-24821)
CVE-2022-24821
CWE-648
High
WordPress Plugin Zingiri Web Shop Multiple Cross-Site Scripting Vulnerabilities (2.4.1)
CVE-2012-6506
CWE-79
High
Joomla Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-23793)
CVE-2022-23793
CWE-22
High
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2022-23302)
CVE-2022-23302
CWE-502
High
WordPress Plugin Media Library Categories Multiple Cross-Site Scripting Vulnerabilities (1.1.1)
CVE-2012-6630
CWE-79
High
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2022-23307)
CVE-2022-23307
CWE-502
High
WordPress Plugin Sabre 'tools.php' Cross-Site Scripting (1.2.0)
CVE-2012-2916
CWE-79
High
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor 'key' Parameter Security Bypass (1.1.24)
-
CWE-264
High
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-23498)
CVE-2022-23498
CWE-200
High
TYPO3 Uncontrolled Recursion Vulnerability (CVE-2022-23500)
CVE-2022-23500
CWE-674
High
WordPress Plugin PDF & Print Button Joliprint Multiple Cross-Site Scripting Vulnerabilities (1.3.0)
-
CWE-79
High
WordPress Plugin Newsletter Manager Multiple Cross-Site Scripting Vulnerabilities (1.0.1)
CVE-2012-6628
CWE-79
High
TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-23503)
CVE-2022-23503
CWE-94
High
WordPress Plugin Network Publisher 'networkpub_key' Parameter Cross-Site Scripting (5.0.1)
-
CWE-79
High
WordPress Plugin Mingle Forum Multiple Cross-Site Scripting Vulnerabilities (1.0.33)
-
CWE-79
High
WordPress Plugin Login With Ajax Cross-Site Scripting (3.0.4)
CVE-2012-4283
CWE-79
High
Next.js User Interface (UI) Misrepresentation of Critical Information Vulnerability (CVE-2022-23646)
CVE-2022-23646
CWE-451
High
WordPress Plugin LeagueManager Multiple Cross-Site Scripting Vulnerabilities (3.7)
CVE-2012-2912
CWE-79
High
WordPress Plugin Leaflet 'id' Parameter Cross-Site Scripting (0.0.1)
CVE-2012-2913
CWE-79
High
WordPress Plugin iFrame Admin Pages 'url' Parameter Cross-Site Scripting (0.1)
-
CWE-79
High
WordPress Plugin GD Star Rating 'tpl_section' Parameter Cross-Site Scripting (1.9.16)
-
CWE-79
High
XWiki Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2022-23619)
CVE-2022-23619
CWE-640
High
WordPress Plugin Gallery-Flagallery Photo Portfolio 'skin' Parameter Cross-Site Scripting (1.72)
-
CWE-79
High
WordPress Plugin EZPZ One Click Backup 'mail' Parameter Cross-Site Scripting (12.03.10)
-
CWE-79
High
WordPress Plugin Dynamic Widgets 'id' Parameter Cross-Site Scripting (1.5.1)
-
CWE-79
High
WordPress Plugin Codestyling Localization 'name' Parameter Cross-Site Scripting (1.99.19)
-
CWE-79
High
WordPress Plugin CataBlog 'category' Parameter Cross-Site Scripting (1.6.2)
-
CWE-79
High
WordPress Plugin FoxyPress 'uploadify.php' Arbitrary File Upload (0.4.2.1)
-
CWE-434
High
Oracle HTTP Server CVE-2022-21593 Vulnerability (CVE-2022-21593)
CVE-2022-21593
-
High
WordPress Plugin Mini Mail Dashboard Widget Cross-Site Scripting (1.42)
CVE-2012-2583
CWE-79
High
WordPress Plugin ChenPress Arbitrary File Upload (3.0)
-
CWE-434
High
WordPress Plugin Front End Upload Arbitrary File Upload (0.5.4.4)
-
CWE-434
High
WordPress Plugin Front-end Editor 'upload.php' Arbitrary File Upload (2.2.1)
-
CWE-434
High
WordPress Plugin Flexi Quote Rotator SQL Injection and Cross-Site Request Forgery Vulnerabilities (0.9)
-
CWE-352
High
WordPress Plugin Custom Tables 'key' Parameter Cross-Site Scripting (3.4.4)
-
CWE-79
High
WordPress Plugin Count per Day 'userperspan.php' Multiple Cross-Site Scripting Vulnerabilities (3.1.1)
CVE-2012-3434
CWE-79
High
WordPress Plugin CONTUS VBLOG-Video Blogging 'save.php' Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Code Embed 'suffix' Parameter Cross-Site Scripting (2.0.1)
-
CWE-79
High
WordPress Plugin Cimy User Extra Fields Arbitrary File Upload (2.3.7)
-
CWE-434
High
WordPress Plugin Church Admin 'id' Parameter Cross-Site Scripting (0.33.4.5)
-
CWE-79
High
WordPress Plugin Automatic Online Backup 'url' Parameter Cross-Site Scripting (0.8.2)
-
CWE-79
High
WordPress Plugin Global Content Blocks PHP Code Execution and Information Disclosure Vulnerabilities (1.5.1)
-
CWE-200
High
WordPress Plugin A Page Flip Book 'pageflipbook_language' Parameter Local File Include (2.3)
CVE-2012-6652
CWE-22
High
WordPress Plugin Zingiri Web Shop 'uploadfilexd.php' Arbitrary File Upload (2.4.3)
-
CWE-434
High
WordPress Plugin wpStoreCart 'upload.php' Arbitrary File Upload (2.5.29)
CVE-2012-3576
CWE-434
High
WordPress Plugin wp superb Slideshow 'upload.php' Arbitrary File Upload (2.2)
-
CWE-434
High
WordPress Plugin WP-Property-WordPress Powered Real Estate and Property Management Arbitrary File Upload (1.35.0)
-
CWE-434
High
WordPress Plugin WP Mass Mail Open Email Relay (2.45)
-
CWE-264
High
WordPress Plugin WP Marketplace-Complete Shopping Cart/eCommerce Solution 'uploadify.php' Arbitrary File Upload (1.6.1)
-
CWE-434
High
WordPress Plugin Wp-ImageZoom 'file' Parameter Information Disclosure (1.0.3)
-
CWE-22
High
WordPress Plugin WP GPX Maps 'wp-gpx-maps_admin_tracks.php' Arbitrary File Upload (1.1.22)
CVE-2012-6649
CWE-434
High
WordPress Plugin WP Easy Gallery 'add-gallery.php' Arbitrary File Upload (1.8)
-
CWE-434
High
WordPress Plugin GD Star Rating 'export.php' Security Bypass (1.9.18)
-
CWE-264
High
WordPress Plugin Knews Multilingual Newsletters 'ff' Parameter Cross-Site Scripting (1.1.0)
-
CWE-79
High
MySQL CVE-2022-21351 Vulnerability (CVE-2022-21351)
CVE-2022-21351
-
High
WordPress Plugin WP-Predict 'predictId' Parameter Blind SQL Injection (1.0)
-
CWE-89
High
WordPress Plugin HD Webplayer Multiple SQL Injection Vulnerabilities (1.1)
-
CWE-89
High
WordPress Plugin G-Lock Double Opt-in Manager 'ajaxbackend.php' SQL Injection (2.6.2)
-
CWE-89
High
WordPress Plugin Download Monitor 'dlsearch' Parameter Cross-Site Scripting (3.3.5.8)
CVE-2012-4768
CWE-79
High
WordPress Plugin Count per Day Search Bar Cross-Site Scripting (3.2.2)
-
CWE-79
High
WordPress Plugin Count per Day 'notes.php' Cross-Site Scripting (3.2.3)
-
CWE-79
High
WordPress Plugin cloudsafe365_for_WP 'file' Parameter Remote File Disclosure (1.46)
-
CWE-22
High
WordPress Plugin Zingiri Web Shop 'abspath' Parameter Remote File Include (2.4.6)
-
CWE-94
High
WordPress Plugin WP Symposium A Social Network For WordPress Multiple SQL Injection Vulnerabilities (12.06.16)
-
CWE-89
High
WordPress Plugin WP Symposium A Social Network For WordPress Multiple Cross-Site Scripting Vulnerabilities (12.07.07)
-
CWE-79
High
WordPress Plugin WP Socializer-Simple & Easy Social Media Share Icons Cross-Site Scripting (2.4.2)
-
CWE-79
High
WordPress Plugin SocialFit 'msg' Parameter Cross-Site Scripting (1.2.2)
-
CWE-79
High
WordPress Plugin LiveGrounds 'uid' Parameter Cross-Site Scripting (0.42)
-
CWE-79
High
WordPress Plugin Sendit WP Newsletter 'id' Parameter SQL Injection (2.1.0)
-
CWE-89
High