The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total39,100
Mitigations14,543
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Calculated Fields Form<= 5.4.5.0
Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings vulnerability
6.5
35 minutes ago
Social Icons Widget & Block by WPZOOM<= 4.5.8
Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creation vulnerability
4.3
35 minutes ago
GetGenie<= 4.3.2
Insecure Direct Object Reference to Authenticated (Author+) Stored Cross-Site Scripting via REST API vulnerability
5.9
36 minutes ago
GetGenie<= 4.3.2
Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Post Overwrite/Deletion vulnerability
5.4
37 minutes ago
Simply Schedule Appointments<= 1.6.9.29
Insecure Direct Object Reference to Authenticated (Staff+) Sensitive Information Exposure vulnerability
4.3
48 minutes ago
Reading progressbar< 1.3.1
Admin+ Stored XSS vulnerability
5.9
5 hours ago
Timetics< 1.0.52
Unauthenticated Payment/Booking Status Update vulnerability
4.3
5 hours ago
Simple Ajax Chat<= 20260217
Unauthenticated Stored Cross-Site Scripting via 'c' vulnerability
7.1
19 hours ago
PixelYourSite PRO<= 12.4.0.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
20 hours ago
PixelYourSite – Your smart PIXEL (TAG) Manager<= 11.2.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
20 hours ago
DukaPress<= 3.2.4
Reflected XSS vulnerability
7.1
20 hours ago
WP Front User Submit / Front Editor< 5.0.6
Unauthenticated Sensitive Information Exposure vulnerability
5.9
20 hours ago
ExactMetrics7.1.0-9.0.2
Authenticated (Custom) Improper Privilege Management to Role Privilege Escalation via Settings Update vulnerability
9.8
20 hours ago
Name Directory<= 1.32.1
Unauthenticated Stored Cross-Site Scripting via 'name_directory_name' vulnerability
7.1
20 hours ago
Checkout Field Editor (Checkout Manager) for WooCommerce<= 2.1.7
Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field vulnerability
7.1
20 hours ago
Contact Form & Lead Form Elementor Builder<= 2.0.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
20 hours ago
Gravity Forms <= 2.9.28
Authenticated (Subscriber+) Stored Cross-Site Scripting via Form Title vulnerability
6.5
20 hours ago
My Sticky Bar<= 2.8.6
Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action vulnerability
9.3
21 hours ago
Datalogics Ecommerce Delivery< 2.6.60
Unauthenticated Privilege Escalation vulnerability
9.8
21 hours ago
Divi Booster< 5.0.2
Unauthenticated PHP Object Injection vulnerability
9.8
21 hours ago