The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,874
Mitigations18,219
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Choose User Role at Registration< 1.3.3
Unauthenticated Privilege Escalation vulnerability
9.8
2 hours ago
MapSVG<= 8.16.1
Arbitrary File Deletion vulnerability
7.7
2 days ago
Essential Addons for Elementor<= 6.8.5
Privilege Escalation vulnerability
6.4
2 days ago
Tutor LMS<= 4.1.2
Cross Site Scripting (XSS) vulnerability
6.5
2 days ago
Quiz And Survey Master<= 11.2.7
PHP Object Injection vulnerability
8.8
2 days ago
Quiz Maker<= 6.7.1.91
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
MapSVG<= 8.16.1
Arbitrary File Upload vulnerability
9.9
2 days ago
User Registration<= 5.2.8
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
4.3
2 days ago
Kirki<= 6.3.2
Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure vulnerability
7.5
2 days ago
Filter & Grids<= 3.12.19
Authenticated (Author+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
2 days ago
Rank Math SEO PRO3.0.123
Unauthenticated Embedded Malicious Code vulnerability
9.8
2 days ago
GetPaid<= 2.8.61
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
European VAT Compliance Assistant for WooCommerce<= 1.36.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
weForms<= 1.6.28
Unauthenticated Limited Media File Deletion vulnerability
5.4
2 days ago
LearnPress<= 4.4.10
Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration vulnerability
6.5
2 days ago
LatePoint<= 5.7.4
Unauthenticated Authentication Bypass vulnerability
9.1
2 days ago
WP Booking System<= 2.1.0.3
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
6.5
2 days ago
User Registration<= 5.2.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
WooCommerce EU VAT Assistant<= 2.1.30.260413
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
@aborruso/ckan-mcp-server< 0.4.112
NPM: ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
3.1
2 days ago