| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
.htaccess File Detected
|
|
|
Informational
|
|
Adminer 4.6.2 file disclosure vulnerability
|
|
|
High
|
|
Adobe ColdFusion directory traversal
|
|
|
High
|
|
Amazon S3 public bucket
|
|
|
Medium
|
|
Amazon S3 publicly writable bucket
|
|
|
High
|
|
Apache 2.x version older than 2.0.48
|
|
|
Medium
|
|
Apache Axis2 administration console weak password
|
|
|
High
|
|
Apache Axis2 information disclosure
|
|
|
Medium
|
|
Apache Axis2 web services enumeration
|
|
|
Low
|
|
Apache Axis2 xsd local file inclusion
|
|
|
High
|
|
Apache balancer-manager application publicly accessible
|
|
|
Medium
|
|
Apache httpOnly cookie disclosure
|
|
|
Medium
|
|
Apache mod_negotiation filename bruteforcing
|
|
|
Low
|
|
Apache OFBiz Log4Shell RCE
|
|
|
High
|
|
Apache perl-status enabled
|
|
|
Medium
|
|
Apache Server-Info Detected
|
|
|
Medium
|
|
Apache Server-Status Detected
|
|
|
Medium
|
|
Apache Solr endpoint
|
|
|
Low
|
|
Apache Solr Log4Shell RCE
|
|
|
High
|
|
Apache solr service exposed
|
|
|
High
|
|
Apache stronghold-info enabled
|
|
|
Low
|
|
Apache stronghold-status enabled
|
|
|
Low
|
|
Apache Tomcat examples directory vulnerabilities
|
|
|
Medium
|
|
Apache Tomcat Information Disclosure CVE-2017-7674
|
|
|
High
|
|
Apache Tomcat sample files
|
|
|
Medium
|
|
Apache Tomcat version older than 4.1.37
|
|
|
Medium
|
|
Apache Tomcat version older than 5.5.26
|
|
|
Medium
|
|
Apache Tomcat version older than 6.0.11
|
|
|
Medium
|
|
Apache Tomcat version older than 6.0.35
|
|
|
High
|
|
Apache Tomcat version older than 7.0.21
|
|
|
High
|
|
apc.php page found
|
|
|
Medium
|
|
API Sensitive Info(PII) accessible without authentication
|
|
|
High
|
|
Arbitrary file existence disclosure in Action Pack
|
|
|
Medium
|
|
Arbitrary File Read on Nuxt.js Development Server
|
|
|
Low
|
|
Arbitrary local file read via file upload
|
|
|
High
|
|
Argo CD Information Disclosure (CVE-2024-37152)
|
|
|
Medium
|
|
ASP.NET application-level tracing enabled
|
|
|
Medium
|
|
ASP.NET connection strings stored in plaintext
|
|
|
High
|
|
ASP.NET Core Development Mode enabled
|
|
|
Medium
|
|
ASP.NET CustomErrors Is Disabled
|
|
|
Medium
|
|
ASP.NET debugging enabled
|
|
|
Low
|
|
ASP.NET diagnostic page
|
|
|
Medium
|
|
ASP.NET error message
|
|
|
Low
|
|
ASP.NET path disclosure
|
|
|
Low
|
|
ASP.NET viewstate encryption disabled
|
|
|
Medium
|
|
ASP.NET WCF service include exception details
|
|
|
Medium
|
|
Atlassian Confluence Access Restriction Bypass
|
|
|
Medium
|
|
Atlassian Confluence information disclosure
|
|
|
High
|
|
Atlassian Confluence Stored Cross Site Scripting
|
|
|
Medium
|
|
Atlassian Jira Manage Filters information disclosure
|
|
|
Low
|
|
Bazaar repository found
|
|
|
High
|
|
Bitrix server test script publicly accessible
|
|
|
Medium
|
|
Chrome Logger information disclosure
|
|
|
Medium
|
|
Citrix ADC NetScaler Local File Inclusion (CVE-2020-8193)
|
|
|
Medium
|
|
Citrix NetScaler Information Disclosure 'Citrix Bleed' (CVE-2023-4966)
|
|
|
Critical
|
|
Clockwork PHP dev tool enabled
|
|
|
Medium
|
|
Cloud metadata publicly exposed
|
|
|
High
|
|
CodeIgniter development mode enabled
|
|
|
Medium
|
|
ColdFusion path disclosures
|
|
|
Low
|
|
ColdFusion Request Debugging information disclosure
|
|
|
Medium
|
|
ColdFusion Robust Exception enabled
|
|
|
Medium
|
|
Composer installed.json publicly accessible
|
|
|
Low
|
|
Configuration file disclosure
|
|
|
High
|
|
Configuration file source code disclosure
|
|
|
High
|
|
Consul API publicly exposed
|
|
|
High
|
|
Core dump checker PHP script
|
|
|
Medium
|
|
Core dump file
|
|
|
High
|
|
Craft CMS Development Mode enabled
|
|
|
Medium
|
|
CVS Detected
|
|
|
Medium
|
|
Delve Debugger Unauthorized Access Vulnerability
|
|
|
High
|
|
Development configuration files
|
|
|
Medium
|
|
Devise weak password
|
|
|
High
|
|
Directory listings
|
|
|
Medium
|
|
Django Debug Mode Enabled
|
|
|
Medium
|
|
Django Debug Toolbar
|
|
|
Medium
|
|
Documentation files
|
|
|
Low
|
|
Dolibarr Information Disclosure (CVE-2023-33568)
|
|
|
High
|
|
Dotenv .env file
|
|
|
High
|
|
Dragonfly Arbitrary File Read/Write (CVE-2021-33564)
|
|
|
High
|
|
Drupal 7 arbitrary PHP code execution and information disclosure
|
|
|
High
|
|
Drupal Backup Migrate directory publicly accessible
|
|
|
High
|
|
Drupal Core 5.x Information Disclosure (5.0 - 5.18)
|
|
|
High
|
|
Drupal Core 6.x Information Disclosure (6.0 - 6.30)
|
|
|
High
|
|
Drupal Core 7.x Information Disclosure (7.0 - 7.14)
|
|
|
High
|
|
Drupal Core 7.x Information Disclosure (7.0 - 7.26)
|
|
|
High
|
|
Drupal Core 8.8.x Information Disclosure (8.8.0 - 8.8.9)
|
|
|
High
|
|
Drupal Core 8.9.x Information Disclosure (8.9.0 - 8.9.5)
|
|
|
High
|
|
Drupal Core 8.x.x Information Disclosure (8.0.0 - 8.7.14)
|
|
|
High
|
|
Drupal Core 9.0.x Information Disclosure (9.0.0 - 9.0.5)
|
|
|
High
|
|
Drupal Views module information disclosure vulnerability
|
|
|
Medium
|
|
Ektron CMS unauthenticated code execution and Local File Read
|
|
|
High
|
|
Elasticsearch service accessible
|
|
|
High
|
|
Elmah.axd / Errorlog.axd Detected
|
|
|
High
|
|
Envoy Metadata disclosure
|
|
|
Low
|
|
Error messages
|
|
|
Low
|
|
Error page path disclosure
|
|
|
Low
|
|
Error page web server version disclosure
|
|
|
Informational
|
|
Express Development Mode enabled
|
|
|
Medium
|
|
F5 BIG-IP Cookie Information Disclosure
|
|
|
Low
|
|
File Content Disclosure in Action View
|
|
|
High
|
|
Frontpage authors.pwd available
|
|
|
Medium
|
|
FrontPage Identified
|
|
|
Low
|
|
Full public read access Azure blob storage
|
|
|
Medium
|
|
Generic Email Address Disclosure
|
|
|
Informational
|
|
GIT Detected exposed
|
|
|
High
|
|
Gitlab user disclosure
|
|
|
Low
|
|
GlassFish admin console weak credentials
|
|
|
High
|
|
Global.asa backup file found
|
|
|
Medium
|
|
GoCD information disclosure (CVE-2021-43287)
|
|
|
High
|
|
Golang runtime profiling data
|
|
|
Medium
|
|
Go web application binary disclosure
|
|
|
Medium
|
|
Grails database console
|
|
|
Medium
|
|
GraphiQL Explorer/Playground Enabled
|
|
|
Medium
|
|
GraphQL Field Suggestions Enabled
|
|
|
Medium
|
|
GraphQL Introspection Query Enabled
|
|
|
Medium
|
|
GraphQL Unhandled Error Leakage
|
|
|
Medium
|
|
Harbor Unauthorized Access Vulnerability
|
|
|
High
|
|
HTML Form found in redirect page
|
|
|
Low
|
|
IBM Web Content Manager XPath injection
|
|
|
High
|
|
IBM WebSphere/WebLogic application source file exposure
|
|
|
High
|
|
IBM WebSphere administration console weak password
|
|
|
High
|
|
IIS Path disclosure
|
|
|
Low
|
|
InfluxDB Unauthorized Access Vulnerability
|
|
|
Medium
|
|
Insecure transition from HTTPS to HTTP in form post
|
|
|
Low
|
|
Insecure transition from HTTP to HTTPS in form post
|
|
|
Medium
|
|
Internet Information Server returns IP address in HTTP header (Content-Location)
|
|
|
Low
|
|
Javascript Source map detected
|
|
|
Informational
|
|
JBoss BSHDeployer MBean
|
|
|
High
|
|
JBoss HttpAdaptor JMXInvokerServlet
|
|
|
High
|
|
JBoss JMX Console Unrestricted Access
|
|
|
High
|
|
JBoss JMX management console
|
|
|
High
|
|
JBoss Seam remoting vulnerabilities
|
|
|
High
|
|
JBoss ServerInfo MBean
|
|
|
High
|
|
JBoss Server MBean
|
|
|
High
|
|
JBoss status servlet information leak
|
|
|
Medium
|
|
JBoss Web Console JMX Invoker
|
|
|
High
|
|
JBoss web service console
|
|
|
Low
|
|
Jenkins dashboard
|
|
|
Medium
|
|
Jenkins open people list
|
|
|
Low
|
|
Jenkins user enumeration
|
|
|
Low
|
|
Jenkins weak password
|
|
|
High
|
|
JetBrains .idea project directory
|
|
|
Medium
|
|
JetLeak vulnerability
|
|
|
High
|
|
Jetty ConcatServlet Information Disclosure (CVE-2021-28169)
|
|
|
Medium
|
|
Jetty Information Disclosure (CVE-2021-34429)
|
|
|
Medium
|
|
Jira QueryComponent Information Disclosure (CVE-2020-14179)
|
|
|
Medium
|
|
Jira Unauthorized User Enumeration (CVE-2020-14181)
|
|
|
Medium
|
|
Jira Unauthorized User Enumeration via UserPickerBrowser
|
|
|
Low
|
|
Joe Editor DEADJOE file
|
|
|
Low
|
|
Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.11)
|
|
|
High
|
|
Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.12)
|
|
|
High
|
|
Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.14)
|
|
|
High
|
|
Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.15)
|
|
|
High
|
|
Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.23)
|
|
|
High
|
|
Joomla! Core 1.5.x Information Disclosure (1.5.0 - 1.5.25)
|
|
|
High
|
|
Joomla! Core 1.6.x Information Disclosure (1.6.0 - 1.6.3)
|
|
|
High
|
|
Joomla! Core 1.6.x Information Disclosure (1.6.0 - 1.6.6)
|
|
|
High
|
|
Joomla! Core 1.7.0 Information Disclosure (1.7.0)
|
|
|
High
|
|
Joomla! Core 1.7.x Information Disclosure (1.7.0 - 1.7.1)
|
|
|
High
|
|
Joomla! Core 1.7.x Information Disclosure (1.7.0 - 1.7.3)
|
|
|
High
|
|
Joomla! Core 1.7.x Information Disclosure (1.7.0 - 1.7.4)
|
|
|
High
|
|
Joomla! Core 2.5.0 Information Disclosure (2.5.0)
|
|
|
High
|
|
Joomla! Core 2.5.x Information Disclosure (2.5.0 - 2.5.3)
|
|
|
High
|
|
Joomla! Core 2.5.x Information Disclosure (2.5.0 - 2.5.4)
|
|
|
High
|
|
Joomla! Core 2.5.x Information Disclosure (2.5.0 - 2.5.8)
|
|
|
High
|
|
Joomla! Core 2.5.x Information Disclosure (2.5.0 - 2.5.9)
|
|
|
High
|
|
Joomla! Core 3.0.x Information Disclosure (3.0.0 - 3.0.2)
|
|
|
High
|
|
Joomla! Core 3.0.x Information Disclosure (3.0.0 - 3.0.3)
|
|
|
High
|
|
Joomla! Core 3.7.x Information Disclosure (3.7.0 - 3.7.5)
|
|
|
High
|
|
Joomla! Core 3.9.x Information Disclosure (3.9.0 - 3.9.22)
|
|
|
High
|
|
Joomla! Core 3.x.x Information Disclosure (3.0.0 - 3.8.7)
|
|
|
High
|
|
Joomla! Core 3.x.x Information Disclosure (3.0.0 - 3.9.19)
|
|
|
High
|
|
Joomla! Core 3.x.x Information Disclosure (3.1.0 - 3.8.7)
|
|
|
High
|
|
Joomla! Core 3.x.x Information Disclosure (3.4.0 - 3.6.5)
|
|
|
High
|
|
Joomla! Core 3.x.x Information Disclosure (3.6.0 - 3.9.12)
|
|
|
High
|
|
Joomla! Core 3.x.x Information Disclosure (3.7.0 - 3.8.1)
|
|
|
High
|
|
Joomla! Core 3.x.x Information Disclosure (3.8.0 - 3.9.13)
|
|
|
High
|
|
Joomla! Core 4.2.0 Information Disclosure (4.2.0)
|
|
|
High
|
|
Joomla! Core improper access check in webservice endpoints
|
|
|
Medium
|
|
Joomla! Core Information Disclosure (1.5.0 - 3.7.5)
|
|
|
High
|
|
Joomla! Core Information Disclosure (1.5.0 - 3.8.1)
|
|
|
High
|
|
Joomla! Core Information Disclosure (2.5.0 - 3.9.22)
|
|
|
High
|
|
Joomla Debug Console enabled
|
|
|
Medium
|
|
Joomla J!Dump extension enabled
|
|
|
Medium
|
|
JSONP enabled by default in MappingJackson2JsonView
|
|
|
Medium
|
|
JVM version leakage
|
|
|
Informational
|
|
KeyCloak Information Disclosure (CVE-2020-27838)
|
|
|
Medium
|
|
Laravel log file publicly accessible
|
|
|
Medium
|
|
Laravel LogViewer open
|
|
|
Medium
|
|
Laravel Telescope open
|
|
|
Medium
|
|
Laravel Terminal open
|
|
|
High
|
|
Lucee Stacktrace Information Disclosure
|
|
|
Medium
|
|
Macromedia Dreamweaver remote database scripts
|
|
|
High
|
|
Magento Cacheleak
|
|
|
High
|
|
Magento Config File Disclosure
|
|
|
Medium
|
|
MantisBT multiple security issues
|
|
|
High
|
|
MediaWiki multiple remote vulnerabilities
|
|
|
High
|
|
Mercurial repository found
|
|
|
High
|
|
Microsoft Access Database File Detected
|
|
|
Medium
|
|
Microsoft Frontpage configuration information
|
|
|
Informational
|
|
Microsoft IIS5 NTLM and Basic authentication bypass
|
|
|
High
|
|
Microsoft IIS Server service.cnf file found
|
|
|
Low
|
|
Microsoft IIS tilde directory enumeration
|
|
|
Low
|
|
Minify arbitrary file disclosure
|
|
|
High
|
|
MinIO Information Disclosure (CVE-2023-28432)
|
|
|
High
|
|
MongoDB HTTP status interface
|
|
|
Medium
|
|
Multiple vulnerabilities in Ioncube loader-wizard.php
|
|
|
High
|
|
MySQL connection credentials
|
|
|
High
|
|
MySQL username disclosure
|
|
|
Low
|
|
Nginx memory disclosure with specially crafted HTTP backend responses
|
|
|
High
|
|
nginx range filter integer overflow
|
|
|
Medium
|
|
Node.js Running in Development Mode
|
|
|
Medium
|
|
NodeBB Arbitrary JSON File Read (CVE-2021-43788)
|
|
|
Medium
|
|
npm log file publicly accessible (npm-debug.log)
|
|
|
Medium
|
|
Nuxt.js Running in Development Mode
|
|
|
Low
|
|
OData feed accessible anonymously
|
|
|
Low
|
|
Oracle applications logs publicy available
|
|
|
Medium
|
|
Oracle E-Business Suite Information Disclosure
|
|
|
High
|
|
Oracle E-Business Suite iStore open user registration
|
|
|
Medium
|
|
Oracle JavaServer Faces multiple vulnerabilities
|
|
|
High
|
|
Oracle Reports Services RWServlet environment variables disclosure
|
|
|
Low
|
|
OwnCloud phpinfo Information Disclosure (CVE-2023-49103)
|
|
|
Critical
|
|
Padding oracle attack
|
|
|
High
|
|
Password found in server response
|
|
|
Medium
|
|
Payara Micro File Read (CVE-2021-41381)
|
|
|
Medium
|
|
PHP-CGI remote code execution
|
|
|
High
|
|
PHP-CS-Fixer cache file publicly accessible (.php_cs.cache)
|
|
|
Medium
|
|
PHP-FPM Status Page
|
|
|
Medium
|
|
PHP Console addon enabled
|
|
|
Medium
|
|
PHP curl_exec() url is controlled by user
|
|
|
Medium
|
|
PHP Debug Bar enabled
|
|
|
Medium
|
|
PHP display_errors Is Enabled
|
|
|
Low
|
|
Phpfastcache phpinfo publicly accessible (CVE-2021-37704)
|
|
|
Medium
|
|
PHPinfo pages
|
|
|
Medium
|
|
PHP opcache-gui publicly accessible
|
|
|
Medium
|
|
PHP opcache-status page publicly accessible
|
|
|
Medium
|
|
PHP Safedir restriction bypass vulnerabilities
|
|
|
High
|
|
PHP upload arbitrary file disclosure vulnerability
|
|
|
Medium
|
|
PHP X Prober publicly accessible
|
|
|
Medium
|
|
Possible database backup
|
|
|
High
|
|
Possible Database Name Disclosure
|
|
|
Low
|
|
Possible sensitive directories
|
|
|
Low
|
|
Possible sensitive files
|
|
|
Low
|
|
Possible SQL Statement in comment
|
|
|
Low
|
|
Possible username or password disclosure
|
|
|
Low
|
|
Possible virtual host found
|
|
|
Low
|
|
Programming Error Messages
|
|
|
Low
|
|
Pyramid DebugToolbar enabled
|
|
|
Medium
|
|
qdPM Information Disclosure
|
|
|
High
|
|
rack-mini-profiler environment variables disclosure
|
|
|
Medium
|
|
Rails controller possible sensitive information disclosure
|
|
|
Medium
|
|
Reachable SharePoint interface
|
|
|
High
|
|
RoR Database Configuration File Detected
|
|
|
High
|
|
RoR Development Mode enabled
|
|
|
Medium
|
|
RSA Private Key Detected
|
|
|
High
|
|
SAP ICF /sap/public/info sensitive information disclosure
|
|
|
Medium
|
|
SAP Management Console get user list
|
|
|
High
|
|
SAP Management Console list logfiles
|
|
|
High
|
|
SAP NetWeaver Java AS WD_CHAT information disclosure vulnerability
|
|
|
Medium
|
|
SAP NetWeaver server info information disclosure
|
|
|
Medium
|
|
SAP NetWeaver server info information disclosure BCB
|
|
|
Medium
|
|
SAP weak/predictable user credentials
|
|
|
High
|
|
Sensitive Data Exposure
|
|
|
Medium
|
|
Sensitive pages could be cached
|
|
|
Low
|
|
Session ID in URL
|
|
|
Low
|
|
SharePoint exposed web services
|
|
|
Medium
|
|
SharePoint user enumeration
|
|
|
High
|
|
SimpleHelp Path Traversal (CVE-2024-57727)
|
|
|
High
|
|
Snoop Servlet information disclosure
|
|
|
Low
|
|
Source Code Disclosure
|
|
|
Medium
|
|
Spring Boot Actuator
|
|
|
Medium
|
|
Spring Boot Actuator v2
|
|
|
Medium
|
|
SQLite Database File Found
|
|
|
Medium
|
|
Stack Trace Disclosure (Apache MyFaces)
|
|
|
Low
|
|
Stack Trace Disclosure (ASP.NET)
|
|
|
Low
|
|
Stack Trace Disclosure (CakePHP)
|
|
|
Low
|
|
Stack Trace Disclosure (CherryPy)
|
|
|
Low
|
|
Stack Trace Disclosure (ColdFusion)
|
|
|
Medium
|
|
Stack Trace Disclosure (Grails)
|
|
|
Low
|
|
Stack Trace Disclosure (GWT)
|
|
|
Low
|
|
Stack Trace Disclosure (Java)
|
|
|
Medium
|
|
Stack Trace Disclosure (Laravel)
|
|
|
Medium
|
|
Stack Trace Disclosure (NodeJS)
|
|
|
Low
|
|
Stack Trace Disclosure (Python)
|
|
|
Medium
|
|
Stack Trace Disclosure (RoR)
|
|
|
Medium
|
|
Stack Trace Disclosure (Ruby-Sinatra Framework)
|
|
|
Low
|
|
Stack Trace Disclosure (Tomcat)
|
|
|
Low
|
|
Struts 2 Config Browser plugin enabled
|
|
|
Medium
|
|
Struts2 Development Mode Enabled
|
|
|
High
|
|
SVN Detected
|
|
|
High
|
|
Symfony databases.yml configuration file
|
|
|
High
|
|
Symfony debug mode enabled
|
|
|
Low
|
|
Symfony debug mode enabled (AcuSensor)
|
|
|
Medium
|
|
Symfony Profiler open
|
|
|
Medium
|
|
Symfony running in dev mode
|
|
|
Medium
|
|
Symfony web debug toolbar
|
|
|
Medium
|
|
Test CGI script leaking environment variables
|
|
|
Medium
|
|
TestRail Information Disclosure (CVE-2021-40875)
|
|
|
Medium
|
|
The Heartbleed Bug
|
|
|
High
|
|
Tiki Wiki CMS: Arbitrary Code Execution
|
|
|
High
|
|
Tiki Wiki CMS: Arbitrary File Download
|
|
|
High
|
|
Tiki Wiki CMS: Remote Code Execution via Calendar Module
|
|
|
High
|
|
Tomcat status page
|
|
|
Low
|
|
TorchServe Management API publicly exposed
|
|
|
High
|
|
Tornado debug mode
|
|
|
Medium
|
|
Trace.axd Detected
|
|
|
High
|
|
TRACE Method enabled
|
|
|
Low
|
|
Tracy debugging tool enabled
|
|
|
Medium
|
|
Typo3 debug mode enabled
|
|
|
Low
|
|
Typo3 sensitive files
|
|
|
Low
|
|
Ubiquiti Unifi Log4Shell RCE
|
|
|
High
|
|
Unprotected JSON file leaking secrets
|
|
|
Medium
|
|
Unprotected phpMyAdmin interface
|
|
|
High
|
|
Unrestricted access to a monitoring system
|
|
|
Low
|
|
Unrestricted access to Caddy API interface
|
|
|
High
|
|
Unrestricted access to NGINX+ API interface (read only)
|
|
|
Medium
|
|
Unrestricted access to NGINX+ API interface (read write)
|
|
|
High
|
|
Unrestricted access to NGINX+ Dashboard
|
|
|
Medium
|
|
Unrestricted access to NGINX+ Status module
|
|
|
Low
|
|
Unrestricted access to NGINX+ Upstream HTTP interface
|
|
|
Medium
|
|
Unrestricted access to Prometheus
|
|
|
Low
|
|
Unrestricted access to Prometheus Metrics
|
|
|
Low
|
|
vBulletin customer number disclosure
|
|
|
High
|
|
Version Disclosure (ASP.NET)
|
|
|
Low
|
|
Version Disclosure (ASP.NET MVC)
|
|
|
Low
|
|
Version Disclosure (IIS)
|
|
|
Low
|
|
Version Disclosure (PHP)
|
|
|
Low
|
|
ViewsState is not Encrypted
|
|
|
Low
|
|
ViewStateMac is Not Enabled
|
|
|
Medium
|
|
Virtual host directory listing
|
|
|
Medium
|
|
VMware Horizon Log4Shell RCE
|
|
|
High
|
|
VMware vCenter Log4Shell RCE
|
|
|
High
|
|
VMware vCenter vcavbootstrap Arbitrary File Read
|
|
|
High
|
|
W3 total cache debug mode
|
|
|
Medium
|
|
Weak password
|
|
|
High
|
|
web.xml configuration file disclosure
|
|
|
High
|
|
webadmin.php script
|
|
|
High
|
|
Webalizer script
|
|
|
Medium
|
|
Web application default/weak credentials
|
|
|
High
|
|
WebDAV directory listing
|
|
|
Medium
|
|
WebLogic admin console weak credentials
|
|
|
High
|
|
Webmail weak password
|
|
|
High
|
|
WebPageTest Unauthorized Access Vulnerability
|
|
|
Medium
|
|
Whoops error handler component detected
|
|
|
Low
|
|
WordPress database credentials disclosure
|
|
|
Medium
|
|
WordPress debug mode
|
|
|
High
|
|
WordPress full path disclosure
|
|
|
Low
|
|
WordPress pingback scanner
|
|
|
Medium
|
|
WordPress Pingback Source URI Denial of Service and Information Disclosure Vulnerabilities (0.6.2 - 2.1.3)
|
|
|
High
|
|
WordPress Plugin A2 Optimized WP Information Disclosure (2.0.10.8)
|
|
|
High
|
|
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Information Disclosure (1.9.25)
|
|
|
High
|
|
WordPress Plugin AccessAlly Information Disclosure (3.5.6)
|
|
|
High
|
|
WordPress Plugin ACF to REST API Information Disclosure (3.2.0)
|
|
|
High
|
|
WordPress Plugin Activity Log Information Disclosure (2.2.12)
|
|
|
High
|
|
WordPress Plugin Acumbamail Information Disclosure (1.0.4)
|
|
|
High
|
|
WordPress Plugin Advanced Contact form 7 DB Information Disclosure (1.1.0)
|
|
|
High
|
|
WordPress Plugin Advanced Contact form 7 DB Information Disclosure (1.6.2)
|
|
|
High
|
|
WordPress Plugin Advanced Custom Fields (ACF) Information Disclosure (6.0.2)
|
|
|
High
|
|
WordPress Plugin Advanced Custom Fields PRO Information Disclosure (6.0.2)
|
|
|
High
|
|
WordPress Plugin Advanced File Manager Information Disclosure (5.2.4)
|
|
|
High
|
|
WordPress Plugin Advanced Woo Search Information Disclosure (1.99)
|
|
|
High
|
|
WordPress Plugin Advanced XML Reader XML External Entity Information Disclosure (0.3.4)
|
|
|
High
|
|
WordPress Plugin AI ChatBot Information Disclosure (4.8.9)
|
|
|
High
|
|
WordPress Plugin AlertWire Information Disclosure (1.1.1)
|
|
|
High
|
|
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Information Disclosure (5.1.2)
|
|
|
High
|
|
WordPress Plugin All-in-One WP Migration Information Disclosure (7.0)
|
|
|
High
|
|
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Information Disclosure (2.2.5.1)
|
|
|
High
|
|
WordPress Plugin ApplyOnline-Application Form Builder and Manager Arbitrary File Disclosure (1.9.92)
|
|
|
High
|
|
WordPress Plugin Aspose Cloud eBook Generator Arbitrary File Download (1.0)
|
|
|
High
|
|
WordPress Plugin Aspose DOC Exporter Arbitrary File Download (1.0)
|
|
|
High
|
|
WordPress Plugin Aspose Importer & Exporter Arbitrary File Download (2.0)
|
|
|
High
|
|
WordPress Plugin Aspose PDF Exporter Arbitrary File Download (1.0)
|
|
|
High
|
|
WordPress Plugin BackupBuddy Arbitrary File Download (8.7.4.1)
|
|
|
High
|
|
WordPress Plugin BackupBuddy Information Disclosure (2.2.28)
|
|
|
High
|
|
WordPress Plugin Backup Migration Arbitrary File Download (1.3.6)
|
|
|
High
|
|
WordPress Plugin Backup Migration Information Disclosure (1.2.8)
|
|
|
High
|
|
WordPress Plugin Backup Migration Information Disclosure (1.3.5)
|
|
|
High
|
|
WordPress Plugin Be POPIA Compliant Information Disclosure (1.1.5)
|
|
|
High
|
|
WordPress Plugin Better WordPress Minify Arbitrary File Disclosure (1.2.2)
|
|
|
High
|
|
WordPress Plugin Breadcrumb NavXT Information Disclosure (6.1.0)
|
|
|
High
|
|
WordPress Plugin BuddyPress Information Disclosure (5.1.1)
|
|
|
High
|
|
WordPress Plugin BulletProof Security Information Disclosure (5.1)
|
|
|
High
|
|
WordPress Plugin Caldera Forms-More Than Contact Forms Arbitrary File Disclosure (1.8.1)
|
|
|
High
|
|
WordPress Plugin Caldera Forms-More Than Contact Forms Information Disclosure (1.3.5.2)
|
|
|
High
|
|
WordPress Plugin Candidate Application Form Arbitrary File Disclosure (1.6)
|
|
|
High
|
|
WordPress Plugin Candidate Application Form Arbitrary File Download (1.0)
|
|
|
High
|
|
WordPress Plugin Cart66 Pro Arbitrary File Disclosure (1.5.3)
|
|
|
High
|
|
WordPress Plugin Cherry Services List Information Disclosure (1.4.1)
|
|
|
High
|
|
WordPress Plugin Cherry Team Members Information Disclosure (1.4.1)
|
|
|
High
|
|
WordPress Plugin Child Theme Configurator Arbitrary File Disclosure (1.7.4)
|
|
|
High
|
|
WordPress Plugin Cimy User Manager 'cimy_um_filename' Parameter Arbitrary File Disclosure (1.4.2)
|
|
|
High
|
|
WordPress Plugin Clone Information Disclosure (2.4.2)
|
|
|
High
|
|
WordPress Plugin cloudsafe365_for_WP 'file' Parameter Remote File Disclosure (1.46)
|
|
|
High
|
|
WordPress Plugin CodeArt-Google MP3 Player Arbitrary File Disclosure (1.0.11)
|
|
|
High
|
|
WordPress Plugin Contact Form 7 Database Information Disclosure (1.3)
|
|
|
High
|
|
WordPress Plugin Contact Form Email Information Disclosure (1.2.66)
|
|
|
High
|
|
WordPress Plugin Correos Woocommerce Arbitrary File Download (1.3.0.0)
|
|
|
High
|
|
WordPress Plugin Count per Day Arbitrary File Download and Cross-Site Scripting Vulnerabilities (3.1)
|
|
|
High
|
|
WordPress Plugin Count per Day Information Disclosure (3.2.5)
|
|
|
High
|
|
WordPress Plugin CP Image Store with Slideshow Arbitrary File Download (1.0.5)
|
|
|
High
|
|
WordPress Plugin Crayon Syntax Highlighter Local File Disclosure (2.6.10)
|
|
|
High
|
|
WordPress Plugin Credova_Financial Information Disclosure (1.4.8)
|
|
|
High
|
|
WordPress Plugin Customize WordPress Emails and Alerts-Better Notifications for WP Information Disclosure (1.8.6)
|
|
|
High
|
|
WordPress Plugin Debug Log Manager Information Disclosure (2.2.2)
|
|
|
High
|
|
WordPress Plugin Direct Download for Woocommerce Arbitrary File Download (1.15)
|
|
|
High
|
|
WordPress Plugin Doneren met Mollie Information Disclosure (2.8.4)
|
|
|
High
|
|
WordPress Plugin Download Monitor Information Disclosure (1.6.3)
|
|
|
High
|
|
WordPress Plugin Download Shortcode Arbitrary File Disclosure (0.1)
|
|
|
High
|
|
WordPress Plugin Download Zip Attachments Arbitrary File Download (1.0.0)
|
|
|
High
|
|
WordPress Plugin Duplicator-WordPress Migration Arbitrary File Disclosure (0.3.0)
|
|
|
High
|
|
WordPress Plugin Duplicator-WordPress Migration Arbitrary File Download (1.3.26)
|
|
|
High
|
|
WordPress Plugin DZS Video Gallery Information Disclosure (3.1.3)
|
|
|
High
|
|
WordPress Plugin Easy Author Image Information Disclosure (1.5)
|
|
|
High
|
|
WordPress Plugin Easy Contact Forms Export 'file' Parameter Information Disclosure (1.1.0)
|
|
|
High
|
|
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Information Disclosure (2.7.6)
|
|
|
High
|
|
WordPress Plugin Email Log Information Disclosure (1.9)
|
|
|
High
|
|
WordPress Plugin Email newsletter 'option' Parameter Information Disclosure (8.0)
|
|
|
High
|
|
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Information Disclosure (3.4.7)
|
|
|
High
|
|
WordPress Plugin Eshop Magic Arbitrary File Disclosure (0.1)
|
|
|
High
|
|
WordPress Plugin Fast Velocity Minify Information Disclosure (2.7.6)
|
|
|
High
|
|
WordPress Plugin Filedownload 'download.php' Local File Disclosure (0.1)
|
|
|
High
|
|
WordPress Plugin File Manager Information Disclosure (6.4)
|
|
|
High
|
|
WordPress Plugin Find My Blocks Information Disclosure (3.3.2)
|
|
|
High
|
|
WordPress Plugin FireStats Arbitrary File Download (1.6.5)
|
|
|
High
|
|
WordPress Plugin Font Awesome Information Disclosure (4.0.0-rc16)
|
|
|
High
|
|
WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Information Disclosure (2.0.07)
|
|
|
High
|
|
WordPress Plugin Forums 'url' Parameter Arbitrary File Disclosure (1.4.3)
|
|
|
High
|
|
WordPress Plugin Fusion Engage Local File Disclosure (1.0.5)
|
|
|
High
|
|
WordPress Plugin Gallery-Flagallery Photo Portfolio Information Disclosure (4.24)
|
|
|
High
|
|
WordPress Plugin Gallery-Flagallery Photo Portfolio SQL Injection and Information Disclosure Vulnerabilities (0.59)
|
|
|
High
|
|
WordPress Plugin Gallery by BestWebSoft Arbitrary File Disclosure (3.8.3)
|
|
|
High
|
|
WordPress Plugin Ghost Arbitrary File Download (0.5.5)
|
|
|
High
|
|
WordPress Plugin GiveWP-Donation and Fundraising Platform Information Disclosure (2.20.2)
|
|
|
High
|
|
WordPress Plugin Global Content Blocks PHP Code Execution and Information Disclosure Vulnerabilities (1.5.1)
|
|
|
High
|
|
WordPress Plugin GlotPress Information Disclosure (2.2.1)
|
|
|
High
|
|
WordPress Plugin Gmail SMTP Arbitrary File Disclosure (1.1.0)
|
|
|
High
|
|
WordPress Plugin Google Doc Embedder Arbitrary File Disclosure (2.4.6)
|
|
|
High
|
|
WordPress Plugin Google Drive for WordPress Information Disclosure (2.2)
|
|
|
High
|
|
WordPress Plugin Gravity Forms Information Disclosure (2.4.8)
|
|
|
High
|
|
WordPress Plugin Groundhogg-Marketing Automation & CRM for WordPress Arbitrary File Disclosure (2.0.9.4)
|
|
|
High
|
|
WordPress Plugin HB AUDIO GALLERY LITE Arbitrary File Download (1.0.0)
|
|
|
High
|
|
WordPress Plugin Health Check & Troubleshooting Arbitrary File Disclosure (1.2.3)
|
|
|
High
|
|
WordPress Plugin Helpful Information Disclosure (4.5.25)
|
|
|
High
|
|
WordPress Plugin History Collection Arbitrary File Download (1.1.1)
|
|
|
High
|
|
WordPress Plugin HTML5 MP3 Player with Playlist Free Information Disclosure (2.6)
|
|
|
High
|
|
WordPress Plugin IBS Mappro Arbitrary File Download (0.6)
|
|
|
High
|
|
WordPress Plugin Image Export Arbitrary File Download (1.1.0)
|
|
|
High
|
|
WordPress Plugin Import all XML, CSV & TXT into WordPress Arbitrary File Disclosure (3.7)
|
|
|
High
|
|
WordPress Plugin Import all XML, CSV & TXT into WordPress Information Disclosure (3.6.74)
|
|
|
High
|
|
WordPress Plugin IP Blacklist Cloud Arbitrary File Disclosure (3.42)
|
|
|
High
|
|
WordPress Plugin iThemes Security (formerly Better WP Security) Information Disclosure (5.1.1)
|
|
|
High
|
|
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Information Disclosure (9.7.1)
|
|
|
High
|
|
WordPress Plugin Jigoshop Information Disclosure (1.17.9)
|
|
|
High
|
|
WordPress Plugin JM Twitter Cards Information Disclosure (6.1)
|
|
|
High
|
|
WordPress Plugin LearnDash LMS Multiple Information Disclosure Vulnerabilities (4.10.2)
|
|
|
High
|
|
WordPress Plugin Log Emails Information Disclosure (1.0.6)
|
|
|
High
|
|
WordPress Plugin MAC PHOTO GALLERY 'albid' Parameter Arbitrary File Disclosure (2.8)
|
|
|
High
|
|
WordPress Plugin MAC PHOTO GALLERY Arbitrary File Download (3.0)
|
|
|
High
|
|
WordPress Plugin Mailing List 'dl.php' Arbitrary File Download (1.4.1)
|
|
|
High
|
|
WordPress Plugin MapSVG Lite Arbitrary File Disclosure (4.2.3.1)
|
|
|
High
|
|
WordPress Plugin Mashshare-Social Media Icons SEO Share Buttons for Facebook, Twitter, Subscribe Information Disclosure (2.3.0)
|
|
|
High
|
|
WordPress Plugin MasterStudy LMS-for Online Courses and Education Information Disclosure (3.2.10)
|
|
|
High
|
|
WordPress Plugin Media Library Assistant Information Disclosure (3.00)
|
|
|
High
|
|
WordPress Plugin Membership Simplified Arbitrary File Download (1.58)
|
|
|
High
|
|
WordPress Plugin Memphis Documents Library Arbitrary File Download (3.1.5)
|
|
|
High
|
|
WordPress Plugin MetaSlider Information Disclosure (3.3.1)
|
|
|
High
|
|
WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Information Disclosure (2.1.3)
|
|
|
High
|
|
WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Disclosure (1.0.4)
|
|
|
High
|
|
WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Download (1.0.5)
|
|
|
High
|
|
WordPress Plugin MP3-jPlayer Information Disclosure (2.3.2)
|
|
|
High
|
|
WordPress Plugin MP3-jPlayer Local File Disclosure (2.3)
|
|
|
High
|
|
WordPress Plugin Multi Plugin Installer Arbitrary File Disclosure (1.1.0)
|
|
|
High
|
|
WordPress Plugin NextGEN Gallery-WordPress Gallery Information Disclosure (1.9.11)
|
|
|
High
|
|
WordPress Plugin Order Export & Order Import for WooCommerce Information Disclosure (1.0.8)
|
|
|
High
|
|
WordPress Plugin Organizer Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities (1.2.1)
|
|
|
High
|
|
WordPress Plugin Page and Post Clone Information Disclosure (1.1)
|
|
|
High
|
|
WordPress Plugin Page Flip Image Gallery 'book_id' Parameter Remote File Disclosure (0.2.2)
|
|
|
High
|
|
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions 'memberslist-csv.php' Information Disclosure (1.4.9)
|
|
|
High
|
|
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Information Disclosure (2.5.2)
|
|
|
High
|
|
WordPress Plugin PAYPAL CURRENCY CONVERTER BASIC FOR WOOCOMMERCE Arbitrary File Disclosure (1.3)
|
|
|
High
|
|
WordPress Plugin PICA Photo Gallery 'imgname' Parameter Information Disclosure (1.0)
|
|
|
High
|
|
WordPress Plugin Pike Firewall Information Disclosure (1.4)
|
|
|
High
|
|
WordPress Plugin Plugin:Newsletter 'data' Parameter Information Disclosure (1.5)
|
|
|
High
|
|
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Information Disclosure (1.8.11)
|
|
|
High
|
|
WordPress Plugin Product Input Fields for WooCommerce Arbitrary File Download (1.2.6)
|
|
|
High
|
|
WordPress Plugin Product Subtitle For WooCommerce Arbitrary File Disclosure (4.1)
|
|
|
High
|
|
WordPress Plugin Quick Buy For Woocommerce Arbitrary File Disclosure (2.0)
|
|
|
High
|
|
WordPress Plugin RB Agency Local File Disclosure (2.4.7)
|
|
|
High
|
|
WordPress Plugin Recent Backups Arbitrary File Download (0.7)
|
|
|
High
|
|
WordPress Plugin S3Bubble Cloud Video With Adverts & Analytics Arbitrary File Download (0.7)
|
|
|
High
|
|
WordPress Plugin Salon Booking System Multiple Information Disclosure Vulnerabilities (7.6.2)
|
|
|
High
|
|
WordPress Plugin Save Contact Form 7 Information Disclosure (2.0)
|
|
|
High
|
|
WordPress Plugin Sell Downloads Arbitrary File Disclosure (1.0.1)
|
|
|
High
|
|
WordPress Plugin Sell Downloads Arbitrary File Disclosure (1.0.17)
|
|
|
High
|
|
WordPress Plugin Service Finder-Provider and Business Listing Local File Disclosure (3.0)
|
|
|
High
|
|
WordPress Plugin Share Drafts Publicly Information Disclosure (1.1.4)
|
|
|
High
|
|
WordPress Plugin ShareYourCart Information Disclosure (1.6.1)
|
|
|
High
|
|
WordPress Plugin Shopping Cart & eCommerce Store Information Disclosure (2.0.5)
|
|
|
High
|
|
WordPress Plugin Simple Backup Arbitrary File Download (2.7.10)
|
|
|
High
|
|
WordPress Plugin Simple Download Button Shortcode 'file' Parameter Information Disclosure (1.0)
|
|
|
High
|
|
WordPress Plugin Simple File Downloader Cross-Site Scripting (1.0.4)
|
|
|
High
|
|
WordPress Plugin Simple File List Arbitrary File Download (3.2.7)
|
|
|
High
|
|
WordPress Plugin Simple Gmail Login Stack Trace Information Disclosure (1.1.3)
|
|
|
High
|
|
WordPress Plugin Simple History Information Disclosure (1.0.7)
|
|
|
High
|
|
WordPress Plugin Simple History Information Disclosure (2.7.4)
|
|
|
High
|
|
WordPress Plugin Simple Image Manipulator Arbitrary File Download (1.0)
|
|
|
High
|
|
WordPress Plugin Simply Static Arbitrary File Download (1.6.2)
|
|
|
High
|
|
WordPress Plugin SiteGuard WP Information Disclosure (1.7.6)
|
|
|
High
|
|
WordPress Plugin SKU Shortlink For WooCommerce Arbitrary File Disclosure (1.3.4)
|
|
|
High
|
|
WordPress Plugin Slack-Chat Information Disclosure (1.5.5)
|
|
|
High
|
|
WordPress Plugin Slideshow Information Disclosure (2.2.21)
|
|
|
High
|
|
WordPress Plugin Slideshow Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities (2.1.12)
|
|
|
High
|
|
WordPress Plugin SL User Create Information Disclosure (0.2.4)
|
|
|
High
|
|
WordPress Plugin Social Discussions Remote File Include and Information Disclosure Vulnerabilities (6.1.1)
|
|
|
High
|
|
WordPress Plugin Social Network Tabs Information Disclosure (1.7.1)
|
|
|
High
|
|
WordPress Plugin SS Downloads Cross-Site Request Forgery and Information Disclosure Vulnerabilities (1.4.3)
|
|
|
High
|
|
WordPress Plugin SSL Insecure Content Fixer Information Disclosure (2.0.0)
|
|
|
High
|
|
WordPress Plugin Stop User Enumeration Cross-Site Scripting (1.3.7)
|
|
|
High
|
|
WordPress Plugin Stop User Enumeration Security Bypass (1.3.18)
|
|
|
High
|
|
WordPress Plugin Stop User Enumeration User Enumeration (1.2.4)
|
|
|
High
|
|
WordPress Plugin Stop User Enumeration User Enumeration (1.3.4)
|
|
|
High
|
|
WordPress Plugin Stop User Enumeration User Enumeration (1.3.8)
|
|
|
High
|
|
WordPress Plugin Subscribe to Comments Unsubscribe Challenge Information Disclosure (2.0.2)
|
|
|
High
|
|
WordPress Plugin Super Refer A Friend Information Disclosure (1.0)
|
|
|
High
|
|
WordPress Plugin Swim Team Arbitrary File Download (1.44.1077)
|
|
|
High
|
|
WordPress Plugin Theme Editor Arbitrary File Download (2.5)
|
|
|
High
|
|
WordPress Plugin Thinkun Remind 'dirPath' Parameter Information Disclosure (1.1.3)
|
|
|
High
|
|
WordPress Plugin Timetable and Event Schedule by MotoPress Information Disclosure (2.3.19)
|
|
|
High
|
|
WordPress Plugin Tinymce Thumbnail Gallery 'href' Parameter Information Disclosure (1.0.7)
|
|
|
High
|
|
WordPress Plugin Total Upkeep-WordPress Backup plus Restore & Migrate by BoldGrid Information Disclosure (1.14.9)
|
|
|
High
|
|
WordPress Plugin TRADIES Information Disclosure (2.2.6)
|
|
|
High
|
|
WordPress Plugin U BuddyPress Forum Attachment 'fileurl' Parameter Remote File Disclosure (1.1.1)
|
|
|
High
|
|
WordPress Plugin U Extended Comment 'fileurl' Parameter Arbitrary File Download (1.0.1)
|
|
|
High
|
|
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Information Disclosure (1.2.5)
|
|
|
High
|
|
WordPress Plugin UnGallery Local File Disclosure (1.5.8)
|
|
|
High
|
|
WordPress Plugin Unyson Information Disclosure (2.7.18)
|
|
|
High
|
|
WordPress Plugin UpiCRM-Free WordPress CRM and Lead Management Information Disclosure (2.1.8.5)
|
|
|
High
|
|
WordPress Plugin User Meta Manager Information Disclosure (3.4.7)
|
|
|
High
|
|
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Information Disclosure (3.9.0)
|
|
|
High
|
|
WordPress Plugin User Profile Picture Information Disclosure (2.4.0)
|
|
|
High
|
|
WordPress Plugin Video Conferencing with Zoom Information Disclosure (3.8.16)
|
|
|
High
|
|
WordPress Plugin Video Embed & Thumbnail Generator Information Disclosure (1.1)
|
|
|
High
|
|
WordPress Plugin Vitamin Multiple Arbitrary File Disclosure Vulnerabilities (1.0.0)
|
|
|
High
|
|
WordPress Plugin W3 Total Cache Arbitrary File Disclosure (0.9.3)
|
|
|
High
|
|
WordPress Plugin W3 Total Cache Information Disclosure (0.9.2.4)
|
|
|
High
|
|
WordPress Plugin WebP Express Arbitrary File Disclosure (0.14.10)
|
|
|
High
|
|
WordPress Plugin Welcart e-Commerce Information Disclosure (2.2.7)
|
|
|
High
|
|
WordPress Plugin Wholesale Market Arbitrary File Download (2.2.0)
|
|
|
High
|
|
WordPress Plugin Wholesale Market for WooCommerce Arbitrary File Download (1.0.6)
|
|
|
High
|
|
WordPress Plugin Wholesale Market for WooCommerce Arbitrary File Download (1.0.7)
|
|
|
High
|
|
WordPress Plugin WooCommerce Arbitrary File Download (3.4.5)
|
|
|
High
|
|
WordPress Plugin WooCommerce Email Test Information Disclosure (1.5)
|
|
|
High
|
|
WordPress Plugin WooCommerce Information Disclosure (4.5.2)
|
|
|
High
|
|
WordPress Plugin WordPress Backup to Dropbox Information Disclosure (4.7.1)
|
|
|
High
|
|
WordPress Plugin WordPress Mobile Pack Information Disclosure (2.0.1)
|
|
|
High
|
|
WordPress Plugin WordPress Mobile Pack Information Disclosure (2.1.2)
|
|
|
High
|
|
WordPress Plugin WordPress renaming tool by Vlajo Arbitrary File Download (1.0)
|
|
|
High
|
|
WordPress Plugin WordPress Social Stream Information Disclosure (1.6)
|
|
|
High
|
|
WordPress Plugin WP-DBManager 'wp-config.php' Arbitrary File Download (2.60)
|
|
|
High
|
|
WordPress Plugin wp-FileManager Arbitrary File Disclosure (1.3.0)
|
|
|
High
|
|
WordPress Plugin Wp-ImageZoom 'file' Parameter Information Disclosure (1.0.3)
|
|
|
High
|
|
WordPress Plugin WP-Live Chat by 3CX Information Disclosure (8.0.28)
|
|
|
High
|
|
WordPress Plugin WP-Mon Arbitrary File Disclosure (0.5.1)
|
|
|
High
|
|
WordPress Plugin WP-Property-WordPress Powered Real Estate and Property Management Information Disclosure (1.38.3.2)
|
|
|
High
|
|
WordPress Plugin WP-RecentComments Information Disclosure (2.2.7)
|
|
|
High
|
|
WordPress Plugin WP Activity Log Information Disclosure (3.1.1)
|
|
|
High
|
|
WordPress Plugin WP Attachment Export Arbitrary File Download (0.2.3)
|
|
|
High
|
|
WordPress Plugin WP CSS 'wp-css-compress.php' Local File Disclosure (2.0.5)
|
|
|
High
|
|
WordPress Plugin WP Custom Pages 'url' Parameter Local File Disclosure (0.5.0.1)
|
|
|
High
|
|
WordPress Plugin WP e-Commerce Shop Styling Arbitrary File Download (2.5)
|
|
|
High
|
|
WordPress Plugin WP Easy full backup Information Disclosure (1.4)
|
|
|
High
|
|
WordPress Plugin WP Hide & Security Enhancer Arbitrary File Download (1.3.9.2)
|
|
|
High
|
|
WordPress Plugin WP Import Export Information Disclosure (3.9.15)
|
|
|
High
|
|
WordPress Plugin WP Import Export Lite Information Disclosure (3.9.15)
|
|
|
High
|
|
WordPress Plugin WP Intercom-Slack for WordPress Information Disclosure (1.2.1)
|
|
|
High
|
|
WordPress Plugin WP Marketplace-Complete Shopping Cart/eCommerce Solution Arbitrary File Download (2.4.0)
|
|
|
High
|
|
WordPress Plugin WP Mobile Edition Arbitrary File Disclosure (2.2.7)
|
|
|
High
|
|
WordPress Plugin WP Online Store Local File Include and Multiple File Disclosure Vulnerabilities (1.3.1)
|
|
|
High
|
|
WordPress Plugin WP PHP widget Information Disclosure (1.0.2)
|
|
|
High
|
|
WordPress Plugin WP REST API (WP API) Information Disclosure (1.2)
|
|
|
High
|
|
WordPress Plugin WP SlackSync Information Disclosure (1.8.5)
|
|
|
High
|
|
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Information Disclosure (3.4.3)
|
|
|
High
|
|
WordPress Plugin wp superb Slideshow Information Disclosure (2.4)
|
|
|
High
|
|
WordPress Plugin wptf-image-gallery Arbitrary File Download (1.0.3)
|
|
|
High
|
|
WordPress Plugin YaySMTP-Simple WP SMTP Mail Information Disclosure (2.2)
|
|
|
High
|
|
WordPress Plugin Yoast SEO Information Disclosure (3.2.4)
|
|
|
High
|
|
WordPress Plugin Zip Attachments Arbitrary File Download (1.4)
|
|
|
High
|
|
WordPress readme.html file
|
|
|
Informational
|
|
WordPress REST API User Enumeration
|
|
|
Low
|
|
WordPress username enumeration
|
|
|
Medium
|
|
WordPress W3 Total Cache plugin predictable cache filenames
|
|
|
High
|
|
WPEngine _wpeprivate/config.json information disclosure
|
|
|
High
|
|
X-Forwarded-For HTTP header security bypass
|
|
|
High
|
|
XML entity injection
|
|
|
High
|
|
XML external entity injection
|
|
|
High
|
|
XML external entity injection (variant)
|
|
|
High
|
|
XML external entity injection and XML injection
|
|
|
High
|
|
XML External Entity Injection via external file
|
|
|
High
|
|
XML external entity injection via File Upload
|
|
|
High
|
|
Yii2 debug toolkit
|
|
|
Medium
|
|
Yii debug mode enabled
|
|
|
Medium
|
|
Zabbix Guest Access
|
|
|
Medium
|
|
Zend framework configuration file information disclosure
|
|
|
High
|
|
Zend Framework local file disclosure via XXE injection
|
|
|
High
|
|
ZK Framework AuUploader Information Disclosure (CVE-2022-36537)
|
|
|
High
|
|
[Possible] AWStats Detected
|
|
|
Medium
|
|
[Possible] Backup Folder
|
|
|
Medium
|
|
[Possible] Backup Source Code Detected
|
|
|
High
|
|
[Possible] Database Connection String Detected
|
|
|
Medium
|
|
[Possible] Internal IP Address Disclosure
|
|
|
Low
|
|
[Possible] Internal Path Disclosure (*nix)
|
|
|
Informational
|
|
[Possible] Internal Path Disclosure (Windows)
|
|
|
Informational
|
|
[Possible] Password Transmitted over Query String
|
|
|
Medium
|
|
[Possible] Sublime SFTP Config File Detected
|
|
|
High
|
|
[Possible] WS_FTP Log File Detected
|
|
|
Informational
|