The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,121
Mitigations18,953
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Avada<= 7.16.2
Unauthenticated Arbitrary File Upload vulnerability
8.1
15 minutes ago
FV Flowplayer Video Player<= 7.5.55.7212
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
15 minutes ago
NextGEN Gallery<= 4.4.1
Authenticated (Custom+) Local File Inclusion vulnerability
7.5
16 minutes ago
User Submitted Posts<= 20260916
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
16 minutes ago
W3 Total Cache<= 2.10.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
18 minutes ago
PDF Invoice Builder for WooCommerce<= 7.1.1
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
9.8
18 minutes ago
WP ERP<= 1.17.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
20 minutes ago
WooCommerce PDF Invoices & Packing Slips<= 5.16.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
20 minutes ago
Welcart e-Commerce<= 2.12.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
22 minutes ago
W3 Total Cache<= 2.10.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
22 minutes ago
Shield Security<= 22.3.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
23 minutes ago
Spectra<= 2.20.4
Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification vulnerability
6.5
24 minutes ago
Uncanny Toolkit for LearnDash<= 3.8.2
Unauthenticated Authentication Bypass vulnerability
9.8
25 minutes ago
WP User Frontend<= 4.3.13
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
25 minutes ago
Wp Social<= 3.2.2
Unauthenticated Authentication Bypass vulnerability
8.1
26 minutes ago
WP Content Pilot<= 2.2.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
33 minutes ago
EasyJobs<= 2.8.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
33 minutes ago
WP User Frontend<= 4.3.13
Reflected Cross-Site Scripting vulnerability
7.1
33 minutes ago
WP Project Manager<= 4.1.1
Unauthenticated Remote Code Execution vulnerability
9.8
34 minutes ago
Redux Framework<= 4.5.15
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
34 minutes ago