The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,307
Mitigations18,329
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Popup Builder< 4.4.6
Unauthenticated Popup Trashing vulnerability
3.7
2 days ago
FireBox<= 3.1.13
Authenticated (Author+) SQL Injection vulnerability
5.3
09/10/2026
Popup Maker<= 1.24.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
18/09/2026
Popup Maker<= 1.24.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
17/09/2026
King Addons for Elementor<= 51.1.62
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
09/09/2026
FireBox<= 3.1.10
Authenticated (Author+) Remote Code Execution to Privilege Escalation vulnerability
8.8
09/09/2026
MailChimp Subscribe Forms <= 4.3.3
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
05/08/2026
OptinCraft – Drag & Drop Optins & Popup Builder for WordPress<= 1.2.0
Authenticated (Administrator+) SQL Injection vulnerability
7.6
05/06/2026
Master Addons for Elementor<= 3.1.0
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
5.9
05/06/2026
Master Addons for Elementor<= 2.0.7.2
Unauthenticated Reflected Cross-Site Scripting vulnerability
6.1
01/05/2026
Instant Popup Builder<= 1.1.7
Unauthenticated Arbitrary Shortcode Execution via 'token' Parameter vulnerability
5.3
19/03/2026
Popup Builder<= 4.4.2
Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens vulnerability
5.3
18/02/2026
Hello Bar Popup Builder<= 1.5.1
Cross Site Scripting (XSS) vulnerability
6.5
18/02/2026
PopupKit<= 2.2.0
Unauthenticated SQL Injection via Multiple REST API Endpoints vulnerability
7.6
04/02/2026
ConvertForce Popup Builder<= 0.0.7
Stored Cross-Site Scripting via entrance_animation vulnerability
5.9
30/01/2026
Popup Builder<= 4.4.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
13/12/2025
Popup Builder<= 1.1.37
Missing Authorization to Authenticated (Subscriber+) Arbitrary plugin Settings Reset vulnerability
5.4
13/12/2025
PopupKit<= 2.1.4
Unauthenticated Server-Side Request Forgery vulnerability
7.2
24/10/2025
WP Popup Builder<= 1.3.8
Sensitive Data Exposure vulnerability
5.3
27/09/2025
Popup Builder<= 1.1.35
Local File Inclusion Vulnerability
7.5
22/04/2025