The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,162
Mitigations17,052
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Bookly<= 28.1
Insecure Direct Object Reference to Unauthenticated Sensitive Data Access and Message Injection via 'conversation_id' Parameter vulnerability
7.5
30 minutes ago
Bold Page Builder<= 5.9.6
Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter vulnerability
6.5
31 minutes ago
WP-Lister Lite for eBay<= 3.8.9
Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Request vulnerability
7.1
33 minutes ago
JetFormBuilder<= 3.6.2
Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
9.8
34 minutes ago
Advanced Popups<= 1.2.3
Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Field vulnerability
5.9
46 minutes ago
Ad Inserter<= 2.8.16
Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter vulnerability
5.3
47 minutes ago
Contest Gallery<= 32.0.1
Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameter vulnerability
8.8
53 minutes ago
TrueBooker<= 1.2.3
Privilege Escalation vulnerability
9.8
56 minutes ago
Hotel Booking Lite<= 6.2.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Consulting<= 6.7.16
WordPress Consulting - Business, Finance WordPress Theme theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
9 hours ago
Advanced Custom Fields: Extended PRO<= 0.9.2.6
Unauthenticated Remote Code Execution vulnerability
10
9 hours ago
Jobs for WordPress<= 2.8.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
21 hours ago
AI Engine<= 3.7.7
Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter vulnerability
6.5
22 hours ago
WP Event Solution<= 4.1.23
WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter vulnerability
7.5
22 hours ago
WP Event Solution<= 4.1.23
Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter vulnerability
6.5
22 hours ago
PublishPress Authors<= 4.15.0
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
5.9
1 day ago
ShopEngine<= 4.9.5
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 day ago
Amelia< 2.4.10
Amelia Manager+ WordPress Account Takeover vulnerability
7.2
1 day ago
Export &amp; Import WPBakery Page Builder<= 1.0.2
CSRF to Stored XSS vulnerability
7.1
1 day ago
Amelia9.0-9.8.0
Unauthenticated Payment Bypass vulnerability
5.3
1 day ago