The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,604
Mitigations16,423
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Smash Balloon Social Post Feed<= 4.9.0
Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability
6.5
3 minutes ago
Snippet Shortcodes<= 5.2.0
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
6.5
3 minutes ago
Slider Hero<= 9.1.7
Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate) vulnerability
7.6
4 minutes ago
Serious Slider<= 1.4.0
Authenticated (Contributor+) Stored Cross-Site Scripting via 'theme' Shortcode Attribute vulnerability
6.5
4 minutes ago
ShortPixel Adaptive Images<= 3.11.5
Missing Authorization to Authenticated (Subscriber+) Third-Party Plugin Option Modification via 'causer' Parameter vulnerability
4.3
4 minutes ago
Royal Elementor Addons<= 1.7.1064
Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting vulnerability
6.4
5 minutes ago
Query Wrangler<= 1.5.57
Authenticated (Subscriber+) Remote Code Execution via 'options' Parameter vulnerability
8.8
6 minutes ago
Quiz And Survey Master<= 11.2.1
Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option vulnerability
8.5
6 minutes ago
Quiz And Survey Master<= 11.2.1
Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter vulnerability
6.5
6 minutes ago
WooCommerce Product Table Lite<= 5.6.0
Unauthenticated CSS Injection via 'laptop_scroll_offset' Parameter vulnerability
5.3
11 minutes ago
Modal Survey<= 2.0.2.2.3
Insecure Direct Object References (IDOR) vulnerability
4.3
1 hour ago
Slider by 10Web<= 1.2.62
CSRF to Arbitrary File Deletion vulnerability
7.4
1 hour ago
Featured Video Plus<= 2.3.3
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
WPZOOM Forms – Contact Form Plugin for Gutenberg<= 2.0.4
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Frontend Admin by DynamiApps<= 3.29.10
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Login With Ajax<= 4.5.1
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Video Conferencing with Zoom<= 4.6.8
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Wufoo Shortcode<= 1.55
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Typing Effect<= 1.3.7
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
WP Tab Widget<= 1.2.11
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago