The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,323
Mitigations17,942
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Event post<= 6.1.1
Broken Access Control vulnerability
5.4
23 minutes ago
TMDS<= 1.0.15
Broken Access Control vulnerability
5.4
24 minutes ago
VideoWhisper Site Manager for ChatGPT, Claude, Codex<= 1.2.10
Broken Access Control vulnerability
5.4
24 minutes ago
Paid Videochat Turnkey Site<= 7.5.12
Other vulnerability Type vulnerability
4.3
25 minutes ago
Event post<= 6.1.1
Insecure Direct Object References (IDOR) vulnerability
6.5
25 minutes ago
Flexible Quantity – Measurement Price Calculator for WooCommerce<= 2.3.22
Other vulnerability Type vulnerability
5.3
26 minutes ago
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce<= 2.2.4
Broken Access Control vulnerability
4.3
1 day ago
@tinacms/cli<= 2.7.0
NPM: Tina: Code injection via unescaped Git branch name in generated client source
8.2
2 days ago
@tinacms/app<= 2.5.13
NPM: TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
9.3
2 days ago
tinacms<= 3.13.0
NPM: TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
9.3
2 days ago
@tinacms/web-components<= 0.2.0
NPM: @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS
7.6
2 days ago
Divi Plus<= 2.4.0
Unauthenticated Arbitrary File Read vulnerability
7.5
2 days ago
Avada<= 7.16.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 days ago
HivePress<= 1.7.31
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
SureDash<= 1.12.1
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
2 days ago
WPO365<= 44.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.2
2 days ago
Email Marketing for WordPress and WooCommerce – Retainful<= 1.0.10
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.4
2 days ago
LatePoint<= 5.7.2
Unauthenticated SQL Injection vulnerability
7.5
2 days ago
Funnel Builder by FunnelKit<= 3.16.0.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
Molongui<= 5.2.12
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
2 days ago