The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,182
Mitigations16,199
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Simply Schedule Appointments< 1.6.12.6
Unauthenticated Appointment Data Disclosure and Mass Deletion vulnerability
6.5
51 minutes ago
Simple Restrict< 1.2.9
Contributor+ Restricted Content Disclosure vulnerability
2.7
55 minutes ago
ChatBot for eCommerce &#8211; WoowBot< 4.8.4
Unauthenticated Gemini API Key Abuse vulnerability
6.5
55 minutes ago
King Addons for Elementor< 51.1.76
Reflected XSS vulnerability
7.1
59 minutes ago
webtoffee-cookie-consent< 3.5.3
Consent Log Disclosure/Deletion, Page Creation & License Deactivation vulnerability
6.4
1 hour ago
Advanced Custom Fields: Font Awesome Field<= 6.1.1
Broken Access Control vulnerability
4.3
1 hour ago
Theme My Login<= 7.1.14
Cross Site Request Forgery (CSRF) vulnerability
4.3
1 hour ago
Export Import Menus<= 1.9.2
Sensitive Data Exposure vulnerability
5.3
1 hour ago
Custom CSS and JavaScript<= 2.0.16
Sensitive Data Exposure vulnerability
5.3
1 hour ago
Forminator<= 1.56.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Plugins Garbage Collector (Database Cleanup)<= 0.14
Cross Site Request Forgery (CSRF) vulnerability
6.5
1 hour ago
Featured Video Plus<= 2.3.3
Sensitive Data Exposure vulnerability
5.3
1 hour ago
YOP Poll7.0.0-7.0.6
Unauthenticated Vote Restriction Bypass vulnerability
5.3
1 hour ago
TranslatePress<= 3.2.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Content Egg<= 11.3.0
Authenticated (Author+) Arbitrary File Deletion vulnerability
6.8
1 hour ago
SureCart<= 4.6.2
Broken Access Control vulnerability
5.3
1 hour ago
Football Pool<= 2.13.4
Authenticated (Subscriber+) Reflected Cross-Site Scripting vulnerability
7.1
1 hour ago
LightSync Pro<= 2.1.6
Authenticated (Author+) Arbitrary File Upload vulnerability
9.1
1 hour ago
Cost Calculator Builder<= 3.6.17
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
2 hours ago
Independent Analytics - Google Analytics Alternative for WordPress<= 2.15.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago