The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,154
Mitigations17,048
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Hotel Booking Lite<= 6.2.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
Consulting<= 6.7.16
WordPress Consulting - Business, Finance WordPress Theme theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
6 hours ago
Advanced Custom Fields: Extended PRO<= 0.9.2.6
Unauthenticated Remote Code Execution vulnerability
10
6 hours ago
Jobs for WordPress<= 2.8.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
18 hours ago
AI Engine<= 3.7.7
Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter vulnerability
6.5
19 hours ago
WP Event SOlution<= 4.1.23
WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter vulnerability
7.5
19 hours ago
WP Event SOlution<= 4.1.23
Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter vulnerability
6.5
19 hours ago
PublishPress Authors<= 4.15.0
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
5.9
1 day ago
ShopEngine<= 4.9.5
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 day ago
Amelia< 2.4.10
Amelia Manager+ WordPress Account Takeover vulnerability
7.2
1 day ago
Export &amp; Import WPBakery Page Builder<= 1.0.2
CSRF to Stored XSS vulnerability
7.1
1 day ago
Amelia9.0-9.8.0
Unauthenticated Payment Bypass vulnerability
5.3
1 day ago
Temporary Login Without Password< 1.9.9
Authenticated Temporary Access Revocation Bypass vulnerability
5.5
1 day ago
YayPricing< 3.5.7
Subscriber+ Stored XSS vulnerability
6.5
1 day ago
User Registration< 5.2.8
Author+ Privilege Escalation to Administrator vulnerability
7.2
1 day ago
GenieWords1.5.27-1.5.34
Unauthenticated Stored XSS and Configuration Overwrite vulnerability
7.1
1 day ago
YouTube Embed - YouTube Gallery, Vimeo Gallery - Wordpress Plugin10.0-10.3
Unauthenticated Stored XSS vulnerability
7.1
1 day ago
BE REST Endpoints<= 1.0.0
Unauthenticated Stored XSS and Widget Manipulation vulnerability
7.1
1 day ago
Hoo Companion1.0.2
Unauthenticated Stored XSS vulnerability
7.1
1 day ago
Rox Appointment Booking &#8211; Appointment Booking Scheduling Solution< 1.2.0
Unauthenticated Holiday Schedule Modification vulnerability
6.5
1 day ago