Web Application Vulnerabilities Index

This page lists 144 vulnerabilities categorized as medium severity that can be detected by Invicti.

Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Vulnerability Name
Classification
Severity
WordPress Theme NeoMarket Out Of Date
WordPress Theme NeoMarket Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme NeoMarket Version Disclosure
WordPress Theme NeoMarket Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Nicemerry Identified
WordPress Theme Nicemerry Identified
No items found.
Information
WordPress Theme Nicemerry Out Of Date
WordPress Theme Nicemerry Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Nicemerry Version Disclosure
WordPress Theme Nicemerry Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Nusai Fashion Store Identified
WordPress Theme Nusai Fashion Store Identified
No items found.
Information
WordPress Theme Nusai Fashion Store Out Of Date
WordPress Theme Nusai Fashion Store Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Nusai Fashion Store Version Disclosure
WordPress Theme Nusai Fashion Store Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme OceanWP Identified
WordPress Theme OceanWP Identified
No items found.
Information
WordPress Theme OceanWP Out Of Date
WordPress Theme OceanWP Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme OceanWP Version Disclosure
WordPress Theme OceanWP Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme PopularFX Identified
WordPress Theme PopularFX Identified
No items found.
Information
WordPress Theme PopularFX Out Of Date
WordPress Theme PopularFX Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme PopularFX Version Disclosure
WordPress Theme PopularFX Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Rozy Identified
WordPress Theme Rozy Identified
No items found.
Information
WordPress Theme Rozy Out Of Date
WordPress Theme Rozy Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Rozy Version Disclosure
WordPress Theme Rozy Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Secretsho Identified
WordPress Theme Secretsho Identified
No items found.
Information
WordPress Theme Secretsho Out Of Date
WordPress Theme Secretsho Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Secretsho Version Disclosure
WordPress Theme Secretsho Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Sedona Shop Identified
WordPress Theme Sedona Shop Identified
No items found.
Information
WordPress Theme Sedona Shop Out Of Date
WordPress Theme Sedona Shop Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Sedona Shop Version Disclosure
WordPress Theme Sedona Shop Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Shop4u Identified
WordPress Theme Shop4u Identified
No items found.
Information
WordPress Theme Shop4u Out Of Date
WordPress Theme Shop4u Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Shop4u Version Disclosure
WordPress Theme Shop4u Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme ShopyMall Identified
WordPress Theme ShopyMall Identified
No items found.
Information
WordPress Theme ShopyMall Out Of Date
WordPress Theme ShopyMall Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme ShopyMall Version Disclosure
WordPress Theme ShopyMall Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Siezz Identified
WordPress Theme Siezz Identified
No items found.
Information
WordPress Theme Siezz Out Of Date
WordPress Theme Siezz Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Siezz Version Disclosure
WordPress Theme Siezz Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Soaz Identified
WordPress Theme Soaz Identified
No items found.
Information
WordPress Theme Soaz Out Of Date
WordPress Theme Soaz Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Soaz Version Disclosure
WordPress Theme Soaz Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Storemate Identified
WordPress Theme Storemate Identified
No items found.
Information
WordPress Theme Storemate Out Of Date
WordPress Theme Storemate Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Storemate Version Disclosure
WordPress Theme Storemate Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Twenty Nineteen Identified
WordPress Theme Twenty Nineteen Identified
No items found.
Information
WordPress Theme Twenty Nineteen Out Of Date
WordPress Theme Twenty Nineteen Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Twenty Nineteen Version Disclosure
WordPress Theme Twenty Nineteen Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Twenty Seventeen Identified
WordPress Theme Twenty Seventeen Identified
No items found.
Information
WordPress Theme Twenty Seventeen Out Of Date
WordPress Theme Twenty Seventeen Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Twenty Seventeen Version Disclosure
WordPress Theme Twenty Seventeen Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Twenty Sixteen Identified
WordPress Theme Twenty Sixteen Identified
No items found.
Information
WordPress Theme Twenty Sixteen Out Of Date
WordPress Theme Twenty Sixteen Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Twenty Sixteen Version Disclosure
WordPress Theme Twenty Sixteen Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Twenty Twenty Identified
WordPress Theme Twenty Twenty Identified
No items found.
Information
WordPress Theme Twenty Twenty-One Identified
WordPress Theme Twenty Twenty-One Identified
No items found.
Information
WordPress Theme Twenty Twenty-One Out Of Date
WordPress Theme Twenty Twenty-One Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Twenty Twenty-One Version Disclosure
WordPress Theme Twenty Twenty-One Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Twenty Twenty Out Of Date
WordPress Theme Twenty Twenty Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Twenty Twenty Three Identified
WordPress Theme Twenty Twenty Three Identified
No items found.
Information
WordPress Theme Twenty Twenty-Three Out Of Date
WordPress Theme Twenty Twenty-Three Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Twenty Twenty Three Version Disclosure
WordPress Theme Twenty Twenty Three Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Twenty Twenty-Two Identified
WordPress Theme Twenty Twenty-Two Identified
No items found.
Information
WordPress Theme Twenty Twenty-Two Out Of Date
WordPress Theme Twenty Twenty-Two Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme Twenty Twenty-Two Version Disclosure
WordPress Theme Twenty Twenty-Two Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme Twenty Twenty Version Disclosure
WordPress Theme Twenty Twenty Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
WordPress Theme YITH Wonder Identified
WordPress Theme YITH Wonder Identified
No items found.
Information
WordPress Theme YITH Wonder Out Of Date
WordPress Theme YITH Wonder Out Of Date
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
WordPress Theme YITH Wonder Version Disclosure
WordPress Theme YITH Wonder Version Disclosure
CAPEC-170
, 
CWE-205
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-13
, 
Low
Wp-admin Page Detected
Wp-admin Page Detected
CAPEC-87
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
CWE-425
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.9.4.1
, 
OWASP 2013-A7
, 
OWASP 2017-A5
, 
PCI v3.2-6.5.8
, 
WASC-34
, 
Information
WP Engine Configuration File Detected
WP Engine Configuration File Detected
CWE-285
, 
ISO27001-A.9.4.1
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
WASC-15
, 
Low
WS_FTP Log File Detected
WS_FTP Log File Detected
CAPEC-118
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
CWE-538
, 
ISO27001-A.9.4.1
, 
WASC-13
, 
Information
XML External Entity Injection
XML External Entity Injection
CAPEC-376
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
, 
CWE-611
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.14.2.5
, 
OWASP 2013-A1
, 
OWASP 2017-A4
, 
PCI v3.2-6.5.1
, 
WASC-43
, 
High
XML External Entity Injection (IAST)
XML External Entity Injection (IAST)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
, 
CWE-611
, 
High
XOOPS Detected
XOOPS Detected
CWE-205
, 
ISO27001-A.14.2.5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
XPath Injection (IAST)
XPath Injection (IAST)
CAPEC-66
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
, 
CWE-20
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.14.2.5
, 
OWASP 2013-A1
, 
OWASP 2017-A1
, 
PCI v3.2-6.5.1
, 
WASC-19
, 
High
XRegExp Identified
XRegExp Identified
CWE-205
, 
ISO27001-A.14.2.5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
XWiki Identified
XWiki Identified
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
, 
CWE-205
, 
ISO27001-A.14.2.5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
YetiForce CRM Detected
YetiForce CRM Detected
CWE-205
, 
ISO27001-A.14.2.5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
YOURLS Detected
YOURLS Detected
CWE-205
, 
ISO27001-A.14.2.5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information
Yui Identified
Yui Identified
CWE-205
, 
ISO27001-A.14.2.5
, 
OWASP 2017-A6
, 
WASC-13
, 
Information