The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,337
Mitigations17,949
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
JetMenu<= 3.0.5
Cross Site Scripting (XSS) vulnerability
6.5
3 minutes ago
JetElements For Elementor<= 2.9.2.3
Cross Site Scripting (XSS) vulnerability
6.5
6 minutes ago
WP User Manager<= 2.9.22
Broken Access Control vulnerability
4.3
40 minutes ago
Flexible Subscriptions<= 1.8.4
Broken Access Control vulnerability
4.3
40 minutes ago
Products Restricted Users for WooCommerce<= 0.7
Broken Access Control vulnerability
5.3
42 minutes ago
Custom Query Blocks<= 5.6.0
Cross Site Scripting (XSS) vulnerability
6.5
43 minutes ago
Booster Elite for WooCommerce< 8.4.0
Authenticated Arbitrary WordPress Option Disclosure vulnerability
6.5
50 minutes ago
Event post<= 6.1.1
Broken Access Control vulnerability
5.4
1 hour ago
TMDS<= 1.0.15
Broken Access Control vulnerability
5.4
1 hour ago
VideoWhisper Site Manager for ChatGPT, Claude, Codex<= 1.2.10
Broken Access Control vulnerability
5.4
1 hour ago
Paid Videochat Turnkey Site<= 7.5.12
Other vulnerability Type vulnerability
4.3
1 hour ago
Event post<= 6.1.1
Insecure Direct Object References (IDOR) vulnerability
6.5
1 hour ago
Flexible Quantity – Measurement Price Calculator for WooCommerce<= 2.3.22
Other vulnerability Type vulnerability
5.3
1 hour ago
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce<= 2.2.4
Broken Access Control vulnerability
4.3
1 day ago
@tinacms/cli<= 2.7.0
NPM: Tina: Code injection via unescaped Git branch name in generated client source
8.2
2 days ago
@tinacms/app<= 2.5.13
NPM: TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
9.3
2 days ago
tinacms<= 3.13.0
NPM: TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
9.3
2 days ago
@tinacms/web-components<= 0.2.0
NPM: @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS
7.6
2 days ago
Divi Plus<= 2.4.0
Unauthenticated Arbitrary File Read vulnerability
7.5
2 days ago
Avada<= 7.16.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 days ago