The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,437
Mitigations16,811
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Breakdance<= 2.8.1
Unauthenticated Broken Access Control in Design Library Import vulnerability
6.5
9 minutes ago
Profile Builder<= 4.0.0
Unauthenticated Stored Cross-Site Scripting via 'email' Parameter vulnerability
7.1
14 minutes ago
Charitable<= 1.8.12.1
Authenticated (Contributor+) SQL Injection via 'order' Shortcode Attribute vulnerability
8.5
23 minutes ago
Blocksy Companion<= 2.1.51
Authenticated (Author+) Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data) vulnerability
5.9
23 minutes ago
BetterDocs<= 4.8.1
Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content vulnerability
6.5
24 minutes ago
Frontend Admin by DynamiApps<= 3.29.12
Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag vulnerability
8.6
1 hour ago
Support Genix<= 1.4.52
Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token vulnerability
8.8
1 hour ago
Listdom<= 5.8.1
Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter vulnerability
7.1
1 hour ago
Affiliate Super Assistent<= 1.10.2
Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function vulnerability
7.1
1 hour ago
Oxygen Builder6.0-6.1.1
Unauthenticated Broken Access Control in Design Library Import vulnerability
6.5
1 hour ago
Profile Builder<= 4.0.0
Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute vulnerability
6.5
1 hour ago
WP EasyCart<= 5.9.2
Authenticated (Administrator+) SQL Injection via 'product_order' Parameter vulnerability
7.6
1 hour ago
Photo Gallery by Ays<= 6.8.2
Authenticated (Administrator+) SQL Injection via 's' Parameter vulnerability
7.6
1 hour ago
Cozy Blocks<= 2.2.17
Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter vulnerability
5.3
1 hour ago
Master Addons for Elementor<= 3.1.9
Authenticated (Editor+) Arbitrary File Upload via upload_template_kit AJAX ZIP Extraction vulnerability
9.1
1 hour ago
Page Builder: Live Composer<= 2.1.19
Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_id' Shortcode Attribute vulnerability
6.5
1 hour ago
Page Builder: Live Composer<= 2.1.19
Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode vulnerability
6.5
1 hour ago
LearnPress<= 4.4.4
Authenticated (Administrator+) SQL Injection via 'orderby' Parameter vulnerability
7.6
1 hour ago
Frontend Admin by DynamiApps<= 3.29.11
Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute vulnerability
6.5
1 hour ago
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent<= 4.4.1
Arbitrary File Upload vulnerability
10
3 hours ago