The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total36,030
Mitigations13,284
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Strong Testimonials<= 3.2.18
Missing Authorization to Authenticated (Contributor+) Rating Meta Update vulnerability
4.3
39 minutes ago
Lucky Wheel for WooCommerce – Spin a Sale<= 1.1.13
Authenticated (Administrator+) PHP Code Injection via Conditional Tags vulnerability
9.1
43 minutes ago
Plugin Organizer< 10.2.4
Subscriber+ SQLi vulnerability
8.5
18 hours ago
YaMaps for WordPress< 0.6.40
Contributor+ Stored XSS vulnerability
6.5
18 hours ago
Advanced Ads<= 2.0.14
Authenticated (Editor+) Remote Code Execution via Shortcode vulnerability
9.1
1 day ago
PixelYourSite – Your smart PIXEL (TAG) Manager<= 11.1.5
Sensitive Information Exposure via Log File vulnerability
5.3
1 day ago
WC Builder<= 1.2.0
Cross Site Scripting (XSS) vulnerability
6.5
2 days ago
Zota<= 1.3.14
Local File Inclusion vulnerability
7.5
2 days ago
Bold Timeline Lite<= 1.2.7
Cross Site Scripting (XSS) vulnerability
6.5
3 days ago
Brands for WooCommerce<= 3.8.6.3
SQL Injection vulnerability
8.5
3 days ago
Invelity SPS connect<= 1.0.8
Reflected Cross Site Scripting (XSS) vulnerability
7.1
3 days ago
CedCommerce Integration for Good Market<= 1.0.6
Local File Inclusion vulnerability
7.5
3 days ago
Mobile builder<= 1.4.2
Broken Authentication vulnerability
9.8
3 days ago
CubeWP<= 1.1.27
Broken Access Control vulnerability
7.5
3 days ago
Advanced Custom CSS<= 1.1.0
Reflected Cross Site Scripting (XSS) vulnerability
7.1
4 days ago
Booking Ultra Pro<= 1.1.23
Sensitive Data Exposure vulnerability
6.5
4 days ago
WP Project Manager<= 3.0.1
Sensitive Data Exposure vulnerability
6.5
4 days ago
WP Document Revisions<= 3.7.2
Broken Access Control vulnerability
2.7
4 days ago
Vimeotheque<= 2.3.5.2
Cross Site Request Forgery (CSRF) vulnerability
4.3
4 days ago
Fast User Switching<= 1.4.10
Cross Site Request Forgery (CSRF) vulnerability
4.3
4 days ago