Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Privilege Escalation

This page lists 89 vulnerabilities in this category.

Critical: 3 High: 82 Medium: 3 Information: 1
Vulnerability Name
CVE
CWE
Severity
Broken access control in Confluence Server and Data Center (CVE-2023-22515)
CVE-2023-22515
CWE-284
Critical
Unrestricted access to Apache HugeGraph
-
CWE-200
Critical
Improper Authorization in Confluence Server and Data Center (CVE-2023-22518)
CVE-2023-22518
CWE-284
Critical
WordPress plugin All in One SEO Pack privilege escalation vulnerabilities
-
CWE-269
High
WordPress Plugin JupiterX Core Privilege Escalation (2.0.7)
CVE-2022-1654
CWE-264
High
WordPress Plugin Chat-Support Board-WordPress Chat Privilege Escalation (3.3.8)
-
CWE-264
High
WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Privilege Escalation (3.7.1.4)
-
CWE-264
High
WordPress Plugin Store Locator Plus for WordPress Privilege Escalation (5.5.14)
CVE-2021-24289
CWE-264
High
WordPress Plugin WooCommerce Customers Manager Privilege Escalation (26.4)
-
CWE-264
High
WordPress Plugin WP Job Manager Privilege Escalation (1.34.3)
-
CWE-264
High
WordPress Plugin WP Job Manager Privilege Escalation (1.34.4)
-
CWE-264
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Privilege Escalation (2.1.11)
CVE-2020-36157
CWE-264
High
WordPress Plugin iubenda-All-in-one Compliance for GDPR/CCPA Cookie Consent + more Privilege Escalation (3.3.2)
CVE-2022-3911
CWE-269
High
WordPress Plugin wpCentral Privilege Escalation (1.5.0)
CVE-2020-9043
CWE-264
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Privilege Escalation (3.2.2)
-
CWE-264
High
WordPress Plugin Funnel Builder by CartFlows-Create High Converting Sales Funnels For WordPress Privilege Escalation (1.3.0)
-
CWE-264
High
WordPress Plugin Travel Management Privilege Escalation (1.5)
CVE-2019-15773
CWE-264
High
WordPress Plugin Restaurant Reservations Privilege Escalation (1.3)
CVE-2019-15819
CWE-264
High
WordPress Plugin Learning Courses Privilege Escalation (4.7)
CVE-2019-15775
CWE-264
High
WordPress Plugin Donations Privilege Escalation (1.3)
CVE-2019-15772
CWE-264
High
WordPress Plugin Booking Privilege Escalation (2.4)
CVE-2019-15774
CWE-264
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Privilege Escalation (2.0.50)
-
CWE-264
High
WordPress Plugin WPGateway Privilege Escalation (3.5)
CVE-2022-3180
CWE-269
High
WordPress Plugin WatchTowerHQ Privilege Escalation (3.6.16)
CVE-2023-25701
CWE-269
High
WordPress Plugin Login as User or Customer Privilege Escalation (3.2)
CVE-2022-4305
CWE-269
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Privilege Escalation (5.3.0.0)
CVE-2024-1991
CWE-269
High
WordPress Plugin PowerPack for Beaver Builder Privilege Escalation (2.33.0)
CVE-2024-39633
CWE-269
High
WordPress Plugin WooCommerce Social Login Privilege Escalation (2.7.3)
CVE-2024-6636
CWE-862
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Privilege Escalation (5.8.9)
CVE-2024-6411
CWE-269
High
WordPress Plugin JSON API User Privilege Escalation (3.9.3)
CVE-2024-6624
CWE-269
High
WordPress Plugin User Registration-Custom Registration Form, Login Form, and User Profile Privilege Escalation (3.2.0.1)
CVE-2024-4958
CWE-269
High
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Privilege Escalation (1.9.19)
CVE-2024-1505
CWE-269
High
WordPress Plugin Web Application Firewall-website security Privilege Escalation (2.1.1)
CVE-2024-2172
CWE-269
High
WordPress Plugin User Registration-Custom Registration Form, Login Form, and User Profile Privilege Escalation (3.1.5)
CVE-2024-2417
CWE-269
High
WordPress Plugin MasterStudy LMS-for Online Courses and Education Privilege Escalation (3.3.1)
CVE-2024-2409
CWE-269
High
WordPress Plugin UpdraftPlus WordPress Backup Privilege Escalation (1.23.2)
-
CWE-269
High
WordPress Plugin Malware Scanner Privilege Escalation (4.7.2)
CVE-2024-2172
CWE-269
High
WordPress Plugin WP Project Manager-Task, team, and project management featuring kanban board and gantt charts Privilege Escalation (2.6.4)
CVE-2023-3636
CWE-269
High
WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Privilege Escalation (1.7.0.12)
CVE-2023-4404
CWE-269
High
WordPress Plugin WCFM Membership-WooCommerce Memberships for Multivendor Marketplace Privilege Escalation (2.10.0)
CVE-2022-4939
CWE-269
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Privilege Escalation (2.6.6)
CVE-2023-3460
CWE-269
High
WordPress Plugin ReviewX-Multi-criteria Rating & Reviews for WooCommerce Privilege Escalation (1.6.13)
CVE-2023-2833
CWE-269
High
WordPress Plugin WP Data Access Privilege Escalation (5.3.7)
CVE-2023-1874
CWE-269
High
WordPress Plugin CF7 Manual Spam Blocker Privilege Escalation (1.0)
-
CWE-264
High
WordPress Plugin Slick Popup:Contact Form 7 Popup Privilege Escalation (1.7.1)
CVE-2019-15867
CWE-264
High
WordPress Plugin UserPro-Community and User Profile Privilege Escalation (4.9.27)
-
CWE-264
High
WordPress Plugin Easy Updates Manager Privilege Escalation (8.0.4)
CVE-2019-15650
CWE-264
High
Database User Has Admin Privileges
-
CWE-267
High
WordPress Plugin Extra User Details Privilege Escalation (0.4.2)
-
CWE-264
High
WordPress Plugin Admin Management Xtended Privilege Escalation (2.4.0)
-
CWE-264
High
Joomla! Core Privilege Escalation (1.6.0 - 3.6.4)
CVE-2016-9838
CWE-264
High
WooCommerce Payments Authentication Bypass and Privilege Escalation
CVE-2023-28121
CWE-287
High
SAML Respose signature exclusion
-
CWE-16
High
No SAML Respose signature check
-
CWE-16
High
SAML Response without signature
-
CWE-16
High
BuddyPress REST API Privilege Escalation
CVE-2021-21389
CWE-269
High
WordPress Plugin Jigoshop-Store Toolkit Privilege Escalation (1.3.7)
-
CWE-264
High
Apache CouchDB JSON Remote Privilege Escalation Vulnerability
CVE-2017-12635
CWE-285
High
Joomla! Core Security Bypass
CVE-2017-11364
CWE-264
High
VMware directory traversal and privilege escalation vulnerabilities
CVE-2009-3733
CWE-22
High
Vulnerabilities in SharePoint could allow elevation of privilege
CVE-2012-1859
CWE-79
High
Joomla! 1.6/1.7/2.5 privilege escalation vulnerability
CVE-2012-1563
CWE-264
High
VirtueMart access control bypass
-
CWE-287
High
JIRA Security Advisory 2014-02-26
-
CWE-22
High
WordPress Plugin Simple Social Media Share Buttons-Social Sharing for Everyone Privilege Escalation (2.0.21)
-
CWE-264
High
WordPress Plugin Jigoshop-Store Toolkit Privilege Escalation (1.3.8)
-
CWE-264
High
WordPress Plugin WooCommerce-Store Exporter Privilege Escalation (1.8.3)
CVE-2016-10935
CWE-264
High
WordPress Plugin WooCommerce-Store Toolkit Privilege Escalation (1.5.7)
-
CWE-264
High
JIRA Security Advisory 2012-08-28
-
CWE-79
High
WordPress Plugin UserPro-Community and User Profile Privilege Escalation (4.9.20)
-
CWE-264
High
WordPress Plugin WooCommerce Privilege Escalation (3.5.0)
-
CWE-264
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Privilege Escalation (2.3.3)
-
CWE-264
High
WordPress Plugin Cookie Information-Free GDPR Consent Solution Privilege Escalation (1.4.2)
CVE-2018-19207
CWE-264
High
WordPress Plugin Contact Form 7 Privilege Escalation (5.0.3)
-
CWE-264
High
WordPress Plugin WP Support Plus Responsive Ticket System Privilege Escalation (7.1.4)
-
CWE-264
High