The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total52,699
Mitigations17,195
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
ElementsKit Elementor addons Lite<= 4.0.5
Cross Site Scripting (XSS) vulnerability
6.5
21 minutes ago
Import and export users and customers<= 2.4.17
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
35 minutes ago
Paytium<= 5.0.3
Unauthenticated Privilege Escalation vulnerability
9.8
43 minutes ago
Podcast Importer SecondLine<= 1.5.6
Cross Site Scripting (XSS) vulnerability
6.5
44 minutes ago
Ocean Extra<= 2.6.1
Cross Site Scripting (XSS) vulnerability
6.5
44 minutes ago
Ultimate FAQ<= 2.4.14
Cross Site Scripting (XSS) vulnerability
6.5
46 minutes ago
SUMIT Payment Gateway for WooCommerce< 4.0.0
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
2 hours ago
Ultimeter<= 3.0.8
SQL Injection vulnerability
7.6
4 hours ago
Email Log<= 2.63
SQL Injection vulnerability
7.6
4 hours ago
WP EasyCart<= 5.9.4
SQL Injection vulnerability
8.5
4 hours ago
MPCX Lightbox1.2.2-1.2.5
Unauthenticated Non-Public Post Content Disclosure vulnerability
3.7
4 hours ago
Forminator< 1.57.2.1
Unauthenticated Post Meta Injection on Submitted Posts vulnerability
5.3
4 hours ago
Mollie Forms<= 2.11.0
SQL Injection vulnerability
8.5
4 hours ago
Live Copy Paste for Elementor<= 1.5.10
SQL Injection vulnerability
8.5
4 hours ago
Fluent Support<= 2.3.2
Broken Access Control vulnerability
5.4
4 hours ago
Easy Digital Downloads<= 3.7.0
SQL Injection vulnerability
7.6
4 hours ago
Premium Blocks – Gutenberg Blocks for WordPress<= 2.3.17
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago
WSP MCP &#8211; AI Agents Connector<= 2.7.0
WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability
6.5
4 hours ago
MarketKing<= 2.1.70
Broken Access Control vulnerability
5.3
5 hours ago
The Post Grid<= 7.9.5
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago