The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,350
Mitigations16,731
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
User Registration< 5.2.6
Authenticated Privilege Escalation vulnerability
7.2
42 minutes ago
WPBulky<= 1.2.2
SQL Injection vulnerability
8.5
48 minutes ago
Forminator<= 1.57.1
Other vulnerability Type vulnerability
5.3
51 minutes ago
Shared Files< 1.7.67
Unauthenticated Limited File Upload vulnerability
5.3
52 minutes ago
Shared Files Pro< 1.7.70
Unauthenticated Limited File Upload vulnerability
5.3
53 minutes ago
GiveWP<= 4.16.7.1
Remote Code Execution (RCE) vulnerability
10
2 hours ago
Amelia<= 2.2
Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission vulnerability
7.1
4 hours ago
wpForo Forum<= 2.4.17
Unauthenticated SQL Injection via 'referer' Parameter vulnerability
9.3
4 hours ago
ElementsKit Pro<= 4.10.1
Unauthenticated Stored Cross-Site Scripting via 's' Parameter vulnerability
7.1
4 hours ago
Tutor LMS<= 4.0.5
Unauthenticated Remote Code Execution via 'template' and 'data' POST Parameters vulnerability
6.5
4 hours ago
One User Avatar<= 2.5.4
Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter vulnerability
6.5
4 hours ago
LiteSpeed Cache<= 7.8.1
Unauthenticated Stored Cross-Site Scripting via Comment Content vulnerability
7.1
4 hours ago
Forminator<= 1.57.0.1
Unauthenticated Stored Cross-Site Scripting via Rich-Text Textarea Field vulnerability
7.1
4 hours ago
TranslatePress<= 3.3.3
Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser vulnerability
7.1
4 hours ago
Optimole<= 4.2.10
Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter vulnerability
7.1
4 hours ago
Envira Photo Gallery<= 1.12.4
Authenticated (Author+) Stored Cross-Site Scripting via Gallery Description vulnerability
5.9
5 hours ago
GiveWP<= 4.14.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
6.5
5 hours ago
Breeze< 2.5.13
Unauthenticated Limited File Creation vulnerability
5.3
6 hours ago
Quiz And Survey Master< 11.2.4
Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure vulnerability
2.7
6 hours ago
User Registration< 5.2.5
Subscriber+ Pending Email Change Cancellation vulnerability
4.3
6 hours ago