The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,235
Mitigations19,001
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
AnyWhere Elementor<= 1.3.0
Sensitive Data Exposure vulnerability
6.5
5 minutes ago
Forminator<= 1.58.3
Broken Access Control vulnerability
5.3
6 minutes ago
Forminator<= 1.58.3
Content Injection vulnerability
4.3
9 minutes ago
WCFM Membership<= 2.12.0
Broken Access Control vulnerability
5.3
10 minutes ago
Uncanny Automator<= 7.7.1
Broken Access Control vulnerability
5.3
11 minutes ago
Paid Member Subscriptions<= 3.1.3
Cross Site Scripting (XSS) vulnerability
6.5
11 minutes ago
Better Search<= 4.5.2
Broken Access Control vulnerability
5.3
12 minutes ago
AZEXO Store Locator<= 1.4
Subscriber+ Arbitrary Post Deletion vulnerability
6.5
5 hours ago
Eupago Gateway For Woocommerce4.5.0-4.7.5
Unauthenticated Payment Confirmation Bypass vulnerability
5.3
5 hours ago
BuddyPress App<= 3.2.1
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
5 hours ago
CryptoCloud - Crypto Payment Gateway3.0.0-3.0.1
Unauthenticated Arbitrary Order Payment Forgery vulnerability
5.3
8 hours ago
WP Fastest Cache <= 1.5.3
Unauthenticated Sensitive Information Exposure vulnerability
5.9
9 hours ago
SureCart<= 4.9.5
Unauthenticated Account Takeover vulnerability
8.1
9 hours ago
News Kit Elementor Addons<= 1.4.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
9 hours ago
BuddyPress XProfile Custom Image Field<= 3.1.0
Unauthenticated Arbitrary File Deletion vulnerability
8.6
9 hours ago
Advanced Custom Fields: Extended PRO<= 0.9.2.6
Unauthenticated Remote Code Execution vulnerability
10
9 hours ago
Easy Digital Downloads<= 3.7.2
Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability
8.1
10 hours ago
FluentCart<= 1.6.2
Authenticated (Custom+) Arbitrary File Deletion vulnerability
8.1
10 hours ago
Photo Engine<= 6.5.7
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
10 hours ago
weMail<= 2.1.6
Editor+ API Key Disclosure vulnerability
4.9
10 hours ago