The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,178
Mitigations16,195
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
webtoffee-cookie-consent< 3.5.3
Consent Log Disclosure/Deletion, Page Creation & License Deactivation vulnerability
6.4
34 minutes ago
Advanced Custom Fields: Font Awesome Field<= 6.1.1
Broken Access Control vulnerability
4.3
39 minutes ago
Theme My Login<= 7.1.14
Cross Site Request Forgery (CSRF) vulnerability
4.3
45 minutes ago
Export Import Menus<= 1.9.2
Sensitive Data Exposure vulnerability
5.3
46 minutes ago
Custom CSS and JavaScript<= 2.0.16
Sensitive Data Exposure vulnerability
5.3
46 minutes ago
Forminator<= 1.56.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
46 minutes ago
Plugins Garbage Collector (Database Cleanup)<= 0.14
Cross Site Request Forgery (CSRF) vulnerability
6.5
47 minutes ago
Featured Video Plus<= 2.3.3
Sensitive Data Exposure vulnerability
5.3
47 minutes ago
YOP Poll7.0.0-7.0.6
Unauthenticated Vote Restriction Bypass vulnerability
5.3
49 minutes ago
TranslatePress<= 3.2.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
50 minutes ago
Content Egg<= 11.3.0
Authenticated (Author+) Arbitrary File Deletion vulnerability
6.8
52 minutes ago
SureCart<= 4.6.2
Broken Access Control vulnerability
5.3
53 minutes ago
Football Pool<= 2.13.4
Authenticated (Subscriber+) Reflected Cross-Site Scripting vulnerability
7.1
55 minutes ago
LightSync Pro<= 2.1.6
Authenticated (Author+) Arbitrary File Upload vulnerability
9.1
58 minutes ago
Cost Calculator Builder<= 3.6.17
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
1 hour ago
Independent Analytics - Google Analytics Alternative for WordPress<= 2.15.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
TranslatePress<= 3.2.5
Reflected Cross-Site Scripting vulnerability
7.1
1 hour ago
Login/Signup Popup< 3.2.5
Unauthenticated Account Takeover vulnerability
9.8
1 hour ago
ChamaWP< 1.0.13
Unauthenticated PHP Object Injection vulnerability
9.8
3 hours ago
AcyMailing SMTP Newsletter< 10.11.1
Unauthenticated SQL Injection vulnerability
9.3
3 hours ago