🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Get a demo
Web Application Vulnerabilities Index
This page lists
vulnerabilities categorized as
Information
severity that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Vulnerability Name
Classification
Severity
WordPress Theme OceanWP Out Of Date
WordPress Theme OceanWP Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme PopularFX Identified
WordPress Theme PopularFX Identified
No items found.
Information
WordPress Theme PopularFX Out Of Date
WordPress Theme PopularFX Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Rozy Identified
WordPress Theme Rozy Identified
No items found.
Information
WordPress Theme Rozy Out Of Date
WordPress Theme Rozy Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Secretsho Identified
WordPress Theme Secretsho Identified
No items found.
Information
WordPress Theme Secretsho Out Of Date
WordPress Theme Secretsho Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Sedona Shop Identified
WordPress Theme Sedona Shop Identified
No items found.
Information
WordPress Theme Sedona Shop Out Of Date
WordPress Theme Sedona Shop Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Shop4u Identified
WordPress Theme Shop4u Identified
No items found.
Information
WordPress Theme Shop4u Out Of Date
WordPress Theme Shop4u Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme ShopyMall Identified
WordPress Theme ShopyMall Identified
No items found.
Information
WordPress Theme ShopyMall Out Of Date
WordPress Theme ShopyMall Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Siezz Identified
WordPress Theme Siezz Identified
No items found.
Information
WordPress Theme Siezz Out Of Date
WordPress Theme Siezz Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Soaz Identified
WordPress Theme Soaz Identified
No items found.
Information
WordPress Theme Soaz Out Of Date
WordPress Theme Soaz Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Storemate Identified
WordPress Theme Storemate Identified
No items found.
Information
WordPress Theme Storemate Out Of Date
WordPress Theme Storemate Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Twenty Nineteen Identified
WordPress Theme Twenty Nineteen Identified
No items found.
Information
WordPress Theme Twenty Nineteen Out Of Date
WordPress Theme Twenty Nineteen Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Twenty Seventeen Identified
WordPress Theme Twenty Seventeen Identified
No items found.
Information
WordPress Theme Twenty Seventeen Out Of Date
WordPress Theme Twenty Seventeen Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Twenty Sixteen Identified
WordPress Theme Twenty Sixteen Identified
No items found.
Information
WordPress Theme Twenty Sixteen Out Of Date
WordPress Theme Twenty Sixteen Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Twenty Twenty Identified
WordPress Theme Twenty Twenty Identified
No items found.
Information
WordPress Theme Twenty Twenty-One Identified
WordPress Theme Twenty Twenty-One Identified
No items found.
Information
WordPress Theme Twenty Twenty-One Out Of Date
WordPress Theme Twenty Twenty-One Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Twenty Twenty Out Of Date
WordPress Theme Twenty Twenty Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Twenty Twenty Three Identified
WordPress Theme Twenty Twenty Three Identified
No items found.
Information
WordPress Theme Twenty Twenty-Three Out Of Date
WordPress Theme Twenty Twenty-Three Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme Twenty Twenty-Two Identified
WordPress Theme Twenty Twenty-Two Identified
No items found.
Information
WordPress Theme Twenty Twenty-Two Out Of Date
WordPress Theme Twenty Twenty-Two Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
WordPress Theme YITH Wonder Identified
WordPress Theme YITH Wonder Identified
No items found.
Information
WordPress Theme YITH Wonder Out Of Date
WordPress Theme YITH Wonder Out Of Date
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
Wp-admin Page Detected
Wp-admin Page Detected
CAPEC-87
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,Â
CWE-425
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.9.4.1
,Â
OWASP 2013-A7
,Â
OWASP 2017-A5
,Â
PCI v3.2-6.5.8
,Â
WASC-34
,Â
Information
WS_FTP Log File Detected
WS_FTP Log File Detected
CAPEC-118
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,Â
CWE-538
,Â
ISO27001-A.9.4.1
,Â
WASC-13
,Â
Information
XOOPS Detected
XOOPS Detected
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
XRegExp Identified
XRegExp Identified
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
XWiki Identified
XWiki Identified
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,Â
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
YetiForce CRM Detected
YetiForce CRM Detected
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
YOURLS Detected
YOURLS Detected
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
Yui Identified
Yui Identified
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
Zen Cart Detected
Zen Cart Detected
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
ZenPhoto Detected
ZenPhoto Detected
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
Zeptojs Identified
Zeptojs Identified
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
Zikula Detected
Zikula Detected
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
Zope Web Server Identified
Zope Web Server Identified
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,Â
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
Zurmo Detected
Zurmo Detected
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
1