The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,777
Mitigations16,895
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
iubenda<= 3.13.4
Unauthenticated Stored Cross-Site Scripting via Comment Content vulnerability
7.1
5 minutes ago
Music Store< 1.4.5
Unauthenticated SQLi vulnerability
9.3
13 minutes ago
JetFormBuilder< 3.6.5.2
Unauthenticated Password Hash and Arbitrary Metadata Disclosure vulnerability
7.5
23 minutes ago
SureCart< 4.6.3
Subscriber+ Administrator Account Takeover vulnerability
8.8
30 minutes ago
WP Fusion (Pro)<= 3.47.13
Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter vulnerability
7.5
46 minutes ago
HivePress Authentication<= 1.1.4
Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator vulnerability
7.5
55 minutes ago
Frontend Admin by DynamiApps<= 3.29.12
Unauthenticated Account Takeover via '_acf_objects' Object Identifier vulnerability
9.8
1 hour ago
memberdash<= 1.8.5
Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter vulnerability
9.8
1 hour ago
Nokri<= 1.6.4
WordPress Nokri - Job Board WordPress theme plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover vulnerability
8.8
1 hour ago
Otter - Gutenberg Block<= 3.1.7
Missing Authorization to Unauthenticated Purchase Verification Bypass vulnerability
5.3
2 hours ago
Masteriyo - LMS<= 2.2.0
Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion vulnerability
5.3
2 hours ago
Powerkit<= 3.0.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing vulnerability
6.5
2 hours ago
Flamingo<= 2.6.2
Authenticated (Contributor+) Missing Authorization to Unauthorized Tag Information Disclosure via wp.getTerms and ajax-tag-search vulnerability
4.3
2 hours ago
SEO Flow by LupsOnline3.0.0-3.0.2
Unauthenticated Privilege Escalation vulnerability
9.8
2 hours ago
Ninja Forms3.14.10-3.15.1
Unauthenticated Arbitrary Shortcode Execution vulnerability
4.8
23 hours ago
Redirection for Contact Form 72.2.7-3.2.10
Unauthenticated Arbitrary Shortcode Execution vulnerability
4.8
23 hours ago
JetFormBuilder< 3.6.5.2
Unauthenticated Email Header Injection vulnerability
4.8
23 hours ago
Bold Page Builder< 5.9.9
Contributor+ Stored XSS vulnerability
6.5
1 day ago
Real Estate Papi<= 1.0.5
Subscriber+ Plugin Installation vulnerability
4.3
1 day ago
Jetpack16.1-16.1.2
WordPress Jetpack plugin 3.2 - 16.1.2 - Missing Authorization on WPCOM Media API Attachment Parent vulnerability
4.3
2 days ago