The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,275
Mitigations17,913
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP File Download<= 6.3.9
Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification vulnerability
8.1
12 minutes ago
PostX<= 5.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 minutes ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer<= 2.34.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 minutes ago
Presto Player<= 4.5.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
14 minutes ago
Rocket Lazy Load<= 2.4.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
14 minutes ago
Stripe For WooCommerce<= 4.0.17
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
16 minutes ago
Simple Membership<= 4.8.4
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
16 minutes ago
Noptin<= 4.3.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
16 minutes ago
Podlove Podcast Publisher<= 4.5.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
17 minutes ago
WP Booking System<= 2.1.0.1
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
18 minutes ago
PPOM for WooCommerce<= 34.0.10
Unauthenticated Arbitrary File Deletion vulnerability
9.1
18 minutes ago
VikBooking Hotel Booking Engine & PMS<= 1.8.15
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
18 minutes ago
LatePoint<= 5.7.3
Authenticated (Custom+) Privilege Escalation to 'settings[default_wp_role_for_customer]' Parameter vulnerability
8.8
19 minutes ago
GamiPress<= 7.9.4
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
39 minutes ago
Groundhogg<= 4.8.3
Unauthenticated Privilege Escalation to Support User Identity Confusion vulnerability
8.1
48 minutes ago
Groundhogg<= 4.9
Authenticated (Custom+) Privilege Escalation to 'user' Parameter vulnerability
8.8
50 minutes ago
JetFormBuilder<= 3.6.6
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
53 minutes ago
FluentForm<= 6.2.5
Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification vulnerability
5.4
54 minutes ago
Download Manager<= 3.3.57
Unauthenticated DOM-Based Reflected Cross-Site Scripting vulnerability
7.1
54 minutes ago
Frontend Admin by DynamiApps<= 3.28.36
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
55 minutes ago