The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,351
Mitigations16,773
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Forminator< 1.57.0.7
Authenticated Privilege Escalation vulnerability
9.8
24 minutes ago
Amelia9.0-9.7
Provider+ Arbitrary Provider Password Update vulnerability
4.7
28 minutes ago
Events Manager<= 7.4.0.1
Reflected Cross-Site Scripting via 'header_format' Parameter vulnerability
7.1
31 minutes ago
All-in-One WP Migration Unlimited Extension<= 2.84
Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter vulnerability
6.5
32 minutes ago
Return Refund and Exchange For WooCommerce< 4.6.4
Unauthenticated Guest Order Message Disclosure and Manipulation vulnerability
6.5
36 minutes ago
Customer Reviews for WooCommerce<= 5.106.0
Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form vulnerability
7.1
37 minutes ago
Squeeze< 1.7.12
Author+ Arbitrary File Upload vulnerability
9.1
39 minutes ago
Pods< 3.3.9.1
Author+ RCE vulnerability
9.1
40 minutes ago
12 Step Meeting List3.17-3.19.16
Unauthenticated Stored XSS vulnerability
7.1
43 minutes ago
AI Engine3.4.0-3.7.1
Unauthenticated Arbitrary AI Query Execution vulnerability
5.6
44 minutes ago
CMP – Coming Soon & Maintenance< 4.1.18
Editor+ Privilege Escalation vulnerability
9.8
45 minutes ago
Document Embedder< 2.3.1
Unauthenticated Private Document Download vulnerability
5.3
46 minutes ago
Order Tip for WooCommerce< 1.6.0
Shop Manager+ Arbitrary File Deletion vulnerability
8.6
46 minutes ago
TranslatePress<= 3.2.6
Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor vulnerability
6.5
47 minutes ago
Content Mask1.8.0-1.8.5.4
Contributor Publish Capability Bypass vulnerability
2.7
49 minutes ago
Brave< 0.8.6
Unauthenticated Reflected XSS vulnerability
7.1
49 minutes ago
Slider Hero< 9.1.3
Unauthenticated Stored XSS vulnerability
7.1
51 minutes ago
Tutor LMS< 4.0.6
Instructor+ Arbitrary File Read vulnerability
7.5
51 minutes ago
ProfilePress< 4.17.1
Unauthenticated Arbitrary Shortcode Execution via Display Name vulnerability
6.5
52 minutes ago
ProSolution WP Client< 2.0.11
Reflected XSS via 'page' Parameter vulnerability
7.1
54 minutes ago