The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total53,371
Mitigations17,484
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WPCafe<= 3.0.19
Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete vulnerability
5.3
18 minutes ago
Responsive Plus<= 3.5.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
20 minutes ago
SEOPress<= 10.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
4.9
31 minutes ago
Ultra Addons Lite for Elementor<= 1.3.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
40 minutes ago
Helpdesk Support Ticket System for WooCommerce<= 2.1.6
Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion vulnerability
4.3
44 minutes ago
Social Icons Widget & Block by WPZOOM<= 4.7.3
Unauthenticated Sensitive Information Disclosure vulnerability
5.3
48 minutes ago
Download Alt Text AI<= 1.10.41
Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Content Modification vulnerability
4.3
1 hour ago
LearnPress<= 4.4.9.1
Broken Access Control vulnerability
4.3
3 hours ago
Booking Calendar<= 11.8.4
Race Condition vulnerability
3.7
3 hours ago
Aculect AI Companion<= 0.8.1
Unvalidated Redirects and Forwards vulnerability
4.7
3 hours ago
WDS MCP Content Manager<= 3.10.4
Broken Access Control vulnerability
4.3
3 hours ago
PublishPress Series<= 3.1.3
Insecure Direct Object References (IDOR) vulnerability
5.4
3 hours ago
WebSamurai<= 1.0.7
Broken Access Control vulnerability
6.5
3 hours ago
Airano MCP Bridge<= 2.11.0
Broken Access Control vulnerability
6.5
3 hours ago
Smart One Click Setup – Complete Demo Import &amp; Export<= 1.4.3
Sensitive Data Exposure vulnerability
5.3
3 hours ago
IATO MCP<= 1.11.0
Broken Access Control vulnerability
6.5
3 hours ago
EmbedPress<= 4.6.6
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
Beaver Builder<= 2.11.0.5
Authenticated (Contributor+) SQL Injection vulnerability
6.5
3 hours ago
SupportCandy<= 3.5.3
Authenticated (Custom+) SQL Injection vulnerability
6.5
3 hours ago
Ultimate Member<= 2.13.1
Missing Authorization to Unauthenticated Sensitive Profile Field Disclosure vulnerability
5.3
3 hours ago