The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,762
Mitigations18,164
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WPDM – Premium Packages<= 7.2.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Schema & Structured Data for WP & AMP<= 1.67
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
SiteOrigin CSS<= 1.6.7
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
Infinite Uploads<= 3.4.1
Sensitive Data Exposure vulnerability
6.5
1 hour ago
PlanetStudio Payment Gateway<= 1.3.3
Broken Access Control vulnerability
5.3
1 hour ago
Presto Player<= 4.5.3
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Login with phone number<= 1.8.77
Broken Access Control vulnerability
4.3
1 hour ago
Ultimate Addons for Contact Form 7<= 3.5.54
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
SQL Chart Builder<= 3.0.6
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Knowledge Base<= 3.2.0
Broken Access Control vulnerability
5.3
1 hour ago
WPConsent<= 1.1.9
Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS) vulnerability
7.1
1 hour ago
Flexible Quantity – Measurement Price Calculator for WooCommerce<= 2.3.23
Broken Access Control vulnerability
5.3
1 hour ago
Download Monitor<= 5.3.3
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
HivePress<= 1.7.32
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Simply Schedule Appointments<= 1.6.12.35
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
GeoDirectory<= 2.8.192
Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom Field vulnerability
6.5
1 hour ago
TranslatePress<= 3.3.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
YaySMTP<= 2.7.7
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
1 hour ago
Sunshine Photo Cart<= 3.7.4
Broken Access Control vulnerability
5.3
1 hour ago
Photo Engine<= 6.5.6
Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload vulnerability
6.8
1 hour ago