The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,198
Mitigations16,215
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Simply Schedule Appointments< 1.6.12.6
Unauthenticated Appointment Data Disclosure and Mass Deletion vulnerability
6.5
4 hours ago
Simple Restrict< 1.2.9
Contributor+ Restricted Content Disclosure vulnerability
2.7
4 hours ago
ChatBot for eCommerce &#8211; WoowBot< 4.8.4
Unauthenticated Gemini API Key Abuse vulnerability
6.5
4 hours ago
King Addons for Elementor< 51.1.76
Reflected XSS vulnerability
7.1
4 hours ago
webtoffee-cookie-consent< 3.5.3
Consent Log Disclosure/Deletion, Page Creation & License Deactivation vulnerability
6.4
5 hours ago
Advanced Custom Fields: Font Awesome Field<= 6.1.1
Broken Access Control vulnerability
4.3
5 hours ago
Theme My Login<= 7.1.14
Cross Site Request Forgery (CSRF) vulnerability
4.3
5 hours ago
Export Import Menus<= 1.9.2
Sensitive Data Exposure vulnerability
5.3
5 hours ago
Custom CSS and JavaScript<= 2.0.16
Sensitive Data Exposure vulnerability
5.3
5 hours ago
Forminator<= 1.56.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
Plugins Garbage Collector (Database Cleanup)<= 0.14
Cross Site Request Forgery (CSRF) vulnerability
6.5
5 hours ago
Featured Video Plus<= 2.3.3
Sensitive Data Exposure vulnerability
5.3
5 hours ago
YOP Poll7.0.0-7.0.6
Unauthenticated Vote Restriction Bypass vulnerability
5.3
5 hours ago
TranslatePress<= 3.2.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
Content Egg<= 11.3.0
Authenticated (Author+) Arbitrary File Deletion vulnerability
6.8
5 hours ago
SureCart<= 4.6.2
Broken Access Control vulnerability
5.3
5 hours ago
Football Pool<= 2.13.4
Authenticated (Subscriber+) Reflected Cross-Site Scripting vulnerability
7.1
5 hours ago
LightSync Pro<= 2.1.6
Authenticated (Author+) Arbitrary File Upload vulnerability
9.1
5 hours ago
Cost Calculator Builder<= 3.6.17
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
5 hours ago
Independent Analytics - Google Analytics Alternative for WordPress<= 2.15.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago