The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,376
Mitigations17,075
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Filter Gallery<= 1.1.4
Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Deletion vulnerability
8.1
4 minutes ago
Login with QR<= 1.0.0
Unauthenticated Authentication Bypass vulnerability
9.8
14 minutes ago
The Pressengine<= 1.0
Unauthenticated Authentication Bypass vulnerability
9.8
36 minutes ago
Private Feed Key<= 0.1
Unauthenticated Authentication Bypass vulnerability
9.8
38 minutes ago
WordPress<= 7.1
Cross Site Scripting (XSS) vulnerability
7.1
2 hours ago
WP Recipe Maker<= 10.8.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
5.4
10 hours ago
Popup Maker<= 1.24.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
10 hours ago
@platejs/core< 53.3.11
NPM: @platejs/core HTML deserialization can trigger browser behavior during parsing
6.1
10 hours ago
devalue< 5.9.1
NPM: Svelte devalue: DoS via malformed input
5.3
10 hours ago
CSS & JavaScript Toolbox<= 12.0.6
Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
5.9
11 hours ago
LatePoint<= 5.6.3
Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Booking Deletion and Customer/Booking Data Disclosure vulnerability
4.3
12 hours ago
Kubio AI Page Builder<= 2.8.4
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
12 hours ago
NEX-Forms<= 9.3.0
Authenticated (Administrator+) SQL Injection vulnerability
4.9
12 hours ago
VK All in One Expansion Unit<= 9.118.0
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
6.5
12 hours ago
Strong Testimonials<= 3.3.8
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
12 hours ago
Magazine Blocks<= 1.8.6
Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification / Site-Wide Template Takeover vulnerability
4.3
12 hours ago
Magazine Blocks<= 1.8.6
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
12 hours ago
Foxtool All-in-One<= 2.5.3
Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification vulnerability
4.3
12 hours ago
Filter Gallery<= 1.1.4
Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification vulnerability
4.3
12 hours ago
Download Manager<= 3.3.68
Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure vulnerability
6.5
12 hours ago