The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,305
Mitigations19,019
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
GiveWP<= 4.19.1
Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter vulnerability
8.8
1 hour ago
Motors<= 1.4.128
Authenticated (Subscriber+) File Deletion vulnerability
8.1
1 hour ago
LiteSpeed Cache<= 7.9.1
Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) vulnerability
7.5
1 hour ago
@payloadcms/storage-vercel-blob>= 3.25.0, < 3.90.0
npm: @payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter
4.3
5 hours ago
odf-kit>= 0.6.0, < 0.14.2
npm: odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values
6.1
5 hours ago
Customer Reviews for WooCommerce<= 5.126.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
5 hours ago
Redux Framework<= 4.5.16
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.5
6 hours ago
Form Maker by 10Web< 1.15.51
Unauthenticated Stored XSS vulnerability
7.1
14 hours ago
GTM Server Side< 2.3.11
Unauthenticated SSRF and Same-Origin XSS vulnerability
7.1
14 hours ago
Essential Real Estate4.4.3-5.3.4
Subscriber+ Arbitrary Media Attachment Deletion vulnerability
6.5
14 hours ago
Booking Package< 1.7.34
Unauthenticated Payment Bypass vulnerability
5.3
14 hours ago
Duplicator Pro< 5.1.0
Reflected XSS vulnerability
7.1
14 hours ago
Duplicator< 5.1.0
Reflected XSS vulnerability
7.1
14 hours ago
Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance<= 1.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
14 hours ago
Slim Jetpack<= 2.7.0.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
15 hours ago
Mobile builder<= 1.4.2
Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters vulnerability
8.8
15 hours ago
Import and export users and customers<= 2.5.11
Authenticated (Custom+) Privilege Escalation vulnerability
8.8
15 hours ago
Simple Download Monitor< 4.1.3
Contributor+ Private Download Item Title and Description Disclosure vulnerability
4.3
16 hours ago
EventPrime< 4.3.6.1
Unauthenticated Pending Post Disclosure vulnerability
5.3
16 hours ago
WPDM – Premium Packages< 7.3.1
Subscriber+ Guest Order Takeover vulnerability
5.4
16 hours ago