The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,839
Mitigations17,262
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Link Library< 7.9.6
Reflected XSS vulnerability
7.1
10 minutes ago
Themify Builder<= 7.8.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
11 minutes ago
BP Better Messages<= 3.0.4
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
13 minutes ago
Repeater Fields for Elementor Forms<= 2.2.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
15 minutes ago
Fancy Product Designer<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
17 minutes ago
Bookly<= 28.2
Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion vulnerability
6.5
19 minutes ago
HT Contact Form 7<= 2.10.1
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
20 minutes ago
Bookly<= 28.2
Unauthenticated Authorization Bypass vulnerability
5.3
22 minutes ago
GeoDirectory<= 2.8.183
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
25 minutes ago
WP Maps<= 4.9.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
26 minutes ago
Fancy Product Designer<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
27 minutes ago
Restaurant Menu by MotoPress<= 2.4.14
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
30 minutes ago
Fancy Product Designer<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
31 minutes ago
AMP for WP<= 1.1.16
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
34 minutes ago
WPDM – Premium Packages<= 7.2.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
37 minutes ago
JetFormBuilder<= 3.6.5.3
Reflected Cross-Site Scripting vulnerability
7.1
45 minutes ago
BA Book Everything<= 1.8.27
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
51 minutes ago
Modula Image Gallery<= 3.0.2
Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) vulnerability
8.1
57 minutes ago
wpForo Forum<= 3.1.6
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
57 minutes ago
GeoDirectory<= 2.8.181
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago