The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total53,178
Mitigations17,401
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Form Maker by 10Web<= 1.15.47
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
10 minutes ago
Awesome Support<= 6.4.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
16 minutes ago
WP Ultimate CSV Importer<= 9.1
Sensitive Data Exposure vulnerability
5.3
21 minutes ago
bbp style pack<= 6.4.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
24 minutes ago
Payments for Hubtel< 1.0.2
Unauthenticated Payment Gateway Credentials Disclosure vulnerability
7.5
29 minutes ago
Pro Like Button< 2.0
Unauthenticated SQLi vulnerability
9.3
31 minutes ago
Paytm Payment Gateway< 2.8.9
Unauthenticated SQLi vulnerability
9.3
36 minutes ago
BackupSheep WordPress Backup Plugin<= 1.8
Unauthenticated Arbitrary File Deletion and Backup Exfiltration vulnerability
10
40 minutes ago
Cache Enabler< 1.8.17
Unauthenticated Arbitrary File and Directory Deletion vulnerability
8.6
44 minutes ago
Appointment Hour Booking<= 1.5.97
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
58 minutes ago
Forminator<= 1.57.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
FluentForm<= 6.2.14
Broken Access Control vulnerability
5.3
1 hour ago
WooCommerce PDF Invoices & Packing Slips<= 5.16.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
LA-Studio Element Kit for Elementor<= 1.6.2
Server Side Request Forgery (SSRF) vulnerability
7.2
1 hour ago
Redux Framework<= 4.5.14
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Calculated Fields Form<= 5.5.1.3
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
Autoptimize<= 3.1.15.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Social Media & Share Icons<= 3.0.1
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
2 hours ago
Simply Schedule Appointments<= 1.6.12.31
Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
2 hours ago
LatePoint<= 5.7.0
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
2 hours ago