The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,834
Mitigations18,197
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
aThemeArt Theme Helper<= 1.0.8
Cross Site Request Forgery (CSRF) vulnerability
8.8
3 hours ago
Passster<= 4.3.18
Broken Access Control vulnerability
5.3
3 hours ago
PowerPack Addons for Elementor<= 3.1.0
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
Advanced Post Manager<= 4.5.6
Broken Access Control vulnerability
7.1
3 hours ago
YITH PayPal Express Checkout for WooCommerce<= 1.61.0
Broken Access Control vulnerability
5.3
3 hours ago
The Events Calendar<= 6.18.1
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
BookIt<= 2.6.0.5
Broken Access Control vulnerability
5.3
3 hours ago
SmartCrawl<= 3.16.4
Insecure Direct Object References (IDOR) vulnerability
5.4
3 hours ago
WP Event Solution<= 4.1.26
Broken Access Control vulnerability
5.3
3 hours ago
MapSVG<= 8.16.1
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
MapSVG<= 8.16.1
SQL Injection vulnerability
8.5
3 hours ago
MapSVG<= 8.16.1
Sensitive Data Exposure vulnerability
5.3
3 hours ago
Squeeze< 1.8.1
Subscriber+ Missing Authorization vulnerability
5.4
5 hours ago
MAIO &#8211; The new AI GEO / SEO tool< 7.3.22
Unauthenticated Crawl Analytics Disclosure vulnerability
5.3
5 hours ago
GoSMTP Pro<= 1.2.3
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
7 hours ago
Tourfic<= 3.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
8 hours ago
GeoDirectory<= 2.8.191
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
8 hours ago
ProfilePress<= 4.17.5
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
8 hours ago
SureCart<= 4.9.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
8 hours ago
Tutor LMS<= 4.1.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
8 hours ago