The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,562
Mitigations16,398
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
GeoDirectory<= 2.8.172
Cross Site Scripting (XSS) vulnerability
6.5
11 minutes ago
Podlove Podcast Publisher<= 4.5.3
Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter vulnerability
8.8
16 minutes ago
PPWP<= 1.9.20
Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update vulnerability
4.3
22 minutes ago
ProfilePress<= 4.16.19
Authenticated (Subscriber+) Arbitrary Shortcode Execution via First Name / Last Name Profile Field vulnerability
5.4
23 minutes ago
NEX-Forms<= 9.2.4
Authenticated (Admin+) SQL Injection via 'additional_params' Parameter vulnerability
7.6
24 minutes ago
Bookly<= 27.7
WordPress Online Scheduling and Appointment Booking System - Bookly plugin <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameter vulnerability
4.3
24 minutes ago
Loco Translate<= 2.8.7
Authenticated (Translator+) Stored Cross-Site Scripting via PO File Extracted Comments vulnerability
6.5
25 minutes ago
Kubio AI Page Builder<= 2.8.5
Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action vulnerability
4.3
25 minutes ago
Gravity Booster &#8211; Styles &amp; Layouts for Gravity Forms<= 5.26
Authenticated (Editor+) Stored Cross-Site Scripting via 'stylerSettings' Parameter vulnerability
6.5
26 minutes ago
Fullscreen Galleria<= 1.6.12
Authenticated (Contributor+) SQL Injection via 'href' Attribute in Post Content vulnerability
8.5
32 minutes ago
Frontend Admin by DynamiApps<= 3.29.9
Unauthenticated Privilege Escalation via 'item_id' Parameter vulnerability
8.8
32 minutes ago
Everest Forms<= 3.5.2
WordPress Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints vulnerability
4.3
39 minutes ago
Autopay<= 5.0.0
Unauthenticated Stored Cross-Site Scripting via 'bm_woocommerce_css_editor_content' Parameter vulnerability
7.1
39 minutes ago
Advanced File Manager<= 5.4.12
Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter vulnerability
7.1
43 minutes ago
Simply Schedule Appointments<= 1.6.12.10
WordPress Appointment Booking Calendar - Simply Schedule Appointments Booking Plugin plugin <= 1.6.12.10 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure vulnerability
4.3
44 minutes ago
Admin Custom Login<= 3.6.4
Authenticated (Administrator+) Stored Cross-Site Scripting via 'Message Above Login Form' Setting vulnerability
5.9
1 hour ago
ECS – Ele Custom Skin for Elementor< 4.3.8
Contributor+ Arbitrary Post Binding and Global Preset Modification via Dynamic Repeater Handlers vulnerability
3.8
1 hour ago
Backup Migration< 2.1.7
Admin+ Privilege Escalation via Post-Restore Auto-Login vulnerability
7.2
1 hour ago
Product Feed PRO for WooCommerce< 13.5.7
Unauthenticated Feed Configuration Disclosure vulnerability
5.3
1 hour ago
ECS – Ele Custom Skin for Elementor< 4.3.8
Contributor+ Stored XSS via Dynamic Repeater Bindings vulnerability
6.5
1 hour ago