The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total52,263
Mitigations17,067
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
SKT Addons for Elementor<= 4.0
SQL Injection vulnerability
7.6
1 hour ago
WP-Lister Lite for eBay<= 3.8.11
SQL Injection vulnerability
7.6
1 hour ago
MC Woocommerce Wishlist<= 1.9.21
SQL Injection vulnerability
7.6
1 hour ago
PublishPress Series<= 3.1.3
SQL Injection vulnerability
7.6
1 hour ago
ShareOpenly< 1.2.1
Reflected Cross-Site Scripting vulnerability
7.1
2 hours ago
Profile Builder<= 3.16.1
Unauthenticated Limited File Upload vulnerability
5.3
2 hours ago
Really Simple SSL<= 9.8.1
Missing Authorization to 2FA Bypass vulnerability
4.3
3 hours ago
OSM< 6.1.15
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
Loops & Logic<= 4.3.1
Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago
WordPress REST API Authentication<= 4.7.0
Unauthenticated Authentication Method Downgrade vulnerability
5.3
3 hours ago
Design Scuole Italia1.0-2.18.2
Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago
Seraphinite Accelerator< 2.29.24
Subscriber+ DoS vulnerability
6.5
3 hours ago
Design Scuole Italia2.6.0-2.18.1
Unauthenticated Arbitrary File Donwload vulnerability
7.5
3 hours ago
LearnPress4.2.6.4-4.4.6
Reflected XSS vulnerability
7.1
3 hours ago
Optimole4.2.3-4.2.11
Unauthenticated Stored XSS vulnerability
7.1
4 hours ago
MultiVendorX5.0.0-5.0.15
Subscriber+ Arbitrary Store Data and Ownership Overwrite vulnerability
7.1
4 hours ago
@nuxtjs/mdc< 0.22.1
NPM: @nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration
8.1
12 hours ago
Easy Invoice<= 2.3.8
Broken Access Control vulnerability
5.3
16 hours ago
Cooked<= 1.16.0
Insecure Direct Object References (IDOR) vulnerability
5.4
16 hours ago
Simple Membership<= 4.8.2
Broken Access Control vulnerability
5.3
16 hours ago