The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total36,553
Mitigations13,427
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Jeg Elementor Kit<= 3.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability
6.5
6 hours ago
Awesome Hotel Booking<= 1.0
Incorrect Authorization to Unauthenticated Arbitrary Booking Modification vulnerability
6.5
9 hours ago
Testimonial Master<= 0.2.1
Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] vulnerability
7.1
9 hours ago
Starred Review<= 1.4.2
Reflected Cross-Site Scripting via PHP_SELF Variable vulnerability
7.1
9 hours ago
Post Like Dislike<= 1.0
Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] vulnerability
7.1
9 hours ago
Stumble! for WordPress<= 1.1.1
Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] vulnerability
7.1
9 hours ago
WP Widget Changer<= 1.2.5
Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] vulnerability
7.1
9 hours ago
AA Block country<= 1.0.1
Unauthenticated IP Address Spoofing via X-Forwarded-For Header vulnerability
5.3
9 hours ago
Piraeus Bank WooCommerce Payment Gateway<= 3.1.4
Missing Authorization to Unauthenticated Arbitrary Order Status Change vulnerability
6.5
9 hours ago
Stylish Order Form Builder<= 1.0
Authenticated (Subscriber+) Stored Cross-Site Scripting via 'product_name' Parameter vulnerability
6.5
10 hours ago
Unify<= 3.4.9
Missing Authorization to Unauthenticated Option Deletion via 'unify_plugin_downgrade' Parameter vulnerability
6.5
13 hours ago
WP Enable WebP<= 1.0
Authenticated (Author+) Arbitrary File Upload vulnerability
9.1
13 hours ago
SVG Map Plugin<= 1.0.0
Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
Premmerce WooCommerce Customers Manager<= 1.1.14
Reflected Cross-Site Scripting vulnerability
7.1
13 hours ago
WP Photo Album Plus<= 9.1.05.008
Reflected Cross-Site Scripting vulnerability
7.1
13 hours ago
HBLPAY Payment Gateway for WooCommerce<= 5.0.0
Reflected Cross-Site Scripting via 'cusdata' Parameter vulnerability
7.1
13 hours ago
Bit Form – Contact Form Plugin<= 2.21.6
WordPress Bit Form - Contact Form Plugin plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay vulnerability
6.5
13 hours ago
Flashcard<= 0.9
Authenticated (Contributor+) Arbitrary File Read via Path Traversal vulnerability
6.5
13 hours ago
Pure WC Variation Swatches<= 1.1.7
Unauthenticated Settings Update vulnerability
6.5
13 hours ago
Customer Reviews for WooCommerce<= 5.93.1
Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter vulnerability
6.5
13 hours ago