The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,815
Mitigations16,938
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Awesome Support<= 6.3.9
Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial vulnerability
4.3
16 minutes ago
WP Event SOlution<= 4.1.17
Missing Authorization to Authenticated (Subscriber+) Notification Flow Management vulnerability
5.4
1 hour ago
EDD Product Catalog Feed by PixelYourSite<= 1.0.2
Authenticated (Subscriber+) Arbitrary Options Deletion vulnerability
7.1
6 hours ago
JetFormBuilder< 3.6.5.2
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
6 hours ago
B2BKing< 5.2.40
Unauthenticated B2B Group Assignment and Approval Bypass vulnerability
5.3
7 hours ago
Kirki6.2.1-6.2.5
Unauthenticated Stored XSS vulnerability
7.1
9 hours ago
SureCart< 4.7.0
Unauthenticated Account Creation with Automatic Login vulnerability
5.3
9 hours ago
Email Subscribers & Newsletters<= 5.9.27
Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field vulnerability
6.5
9 hours ago
Profile Builder<= 3.15.7
Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability
7.1
9 hours ago
Beaver Builder<= 2.10.3.1
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
10 hours ago
Multilingual CMS<= 4.9.5
Incorrect Authorization to Authenticated (Subscriber+) SQL Injection vulnerability
8.5
10 hours ago
Event Tickets<= 5.27.4
Missing Authorization to Unauthenticated Stripe Credentials Update vulnerability
7.5
10 hours ago
Ninja Forms - Scheduled Exports<= 3.0.3
WordPress Ninja Forms - Scheduled Exports plugin <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API Parameters vulnerability
6.5
1 day ago
Contact Form by Supsystic<= 1.10.2
Unauthenticated Stored Cross-Site Scripting via IP Address Header vulnerability
7.1
1 day ago
HT Menu< 1.2.7
Subscriber+ Stored XSS vulnerability
6.5
1 day ago
JCH Optimize< 6.0.1
Subscriber+ Stored XSS vulnerability
6.5
1 day ago
IPGP Visitors Origin< 1.6
Reflected XSS vulnerability
7.1
1 day ago
JetFormBuilder< 3.6.5.2
Unauthenticated Stored XSS vulnerability
7.1
1 day ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.17
Reflected Cross-Site Scripting via 'formData[id]' Parameter vulnerability
7.1
1 day ago
SureForms<= 2.12.2
Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload vulnerability
7.1
1 day ago