The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,570
Mitigations17,150
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)< 2.0.20
Subscriber+ PHP Object Injection vulnerability
7.5
8 minutes ago
MgoSync2.1.5-2.1.6
Unauthenticated WooCommerce API Credential Disclosure vulnerability
7.5
11 minutes ago
VikRentItems Flexible Rental Management System< 1.2.4
Unauthenticated SQLi vulnerability
9.3
43 minutes ago
Ultimate Addons for Contact Form 7<= 3.5.50
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Wp Ultimate Review<= 2.4.2
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
8.1
2 hours ago
HUSKY<= 1.4.4
Unauthenticated Local File Inclusion vulnerability
10
2 hours ago
Web to Print Online Designer< 2.15.0
Unauthenticated Arbitrary File Upload vulnerability
10
2 hours ago
SAML SP Single Sign On< 6.0.0
Unauthenticated Privilege Escalation vulnerability
8.1
2 hours ago
ProfilePress<= 4.17.2
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
8.1
2 hours ago
The Welcomizer<= 2.8.1
Missing Authorization to Authenticated (Subscriber+) Remote Code Execution vulnerability
10
2 hours ago
UsersWP &#8211; Social Login< 1.5.10
Unauthenticated Account Takeover vulnerability
8.1
2 hours ago
Text Styler<= 1.1.1
Contributor+ Stored XSS vulnerability
6.5
4 hours ago
WP Travel Engine<= 6.8.0
Authenticated (Contributor+) Local File Inclusion vulnerability
7.5
14 hours ago
PixelPlay<= 1.0.2
Missing Authorization to Unauthenticated Arbitrary API Key Deletion vulnerability
5.3
15 hours ago
Image Buzz<= 1.0.3
Missing Authorization to Unauthenticated Arbitrary API Key Modification vulnerability
5.3
15 hours ago
Handily<= 1.0.3
Missing Authorization to Unauthenticated Arbitrary Stripe Payment Settings Modification vulnerability
5.4
15 hours ago
WP-CRM System<= 3.4.6
Authenticated (Contributor+) Exposure of Sensitive Information vulnerability
4.3
15 hours ago
ThumbPress<= 6.2.1
Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation vulnerability
4.3
15 hours ago
Page Builder: Live Composer<= 2.1.21
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
15 hours ago
Hostel<= 1.1.8
Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
5.9
15 hours ago