The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,332
Mitigations16,729
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Amelia<= 2.2
Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission vulnerability
7.1
43 minutes ago
wpForo Forum<= 2.4.17
Unauthenticated SQL Injection via 'referer' Parameter vulnerability
9.3
44 minutes ago
ElementsKit Pro<= 4.10.1
Unauthenticated Stored Cross-Site Scripting via 's' Parameter vulnerability
7.1
45 minutes ago
Tutor LMS<= 4.0.5
Unauthenticated Remote Code Execution via 'template' and 'data' POST Parameters vulnerability
6.5
45 minutes ago
One User Avatar<= 2.5.4
Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter vulnerability
6.5
46 minutes ago
LiteSpeed Cache<= 7.8.1
Unauthenticated Stored Cross-Site Scripting via Comment Content vulnerability
7.1
49 minutes ago
Forminator<= 1.57.0.1
Unauthenticated Stored Cross-Site Scripting via Rich-Text Textarea Field vulnerability
7.1
49 minutes ago
TranslatePress<= 3.3.3
Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser vulnerability
7.1
50 minutes ago
Optimole<= 4.2.10
Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter vulnerability
7.1
51 minutes ago
Envira Photo Gallery<= 1.12.4
Authenticated (Author+) Stored Cross-Site Scripting via Gallery Description vulnerability
5.9
1 hour ago
GiveWP<= 4.14.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
6.5
1 hour ago
Fusion Builder<= 3.15.6
Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' Shortcode Attribute vulnerability
6.5
12 hours ago
LiteSpeed Cache<= 7.7
Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes vulnerability
5.9
12 hours ago
Smart Slider 3<= 3.5.1.38
Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attribute vulnerability
6.5
12 hours ago
libreoffice-convert< 1.8.2
NPM: libreoffice-convert vulnerable to path traversal / arbitrary file write
6.5
14 hours ago
n8n-nodes-sqlite3< 1.0.0
NPM: n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)
6.1
15 hours ago
FoodBoxBooker< 1.0.7
Unauthenticated Arbitrary Password Reset vulnerability
9.8
19 hours ago
AI Engine3.3.3-3.7.1
WordPress AI Engine plugin 3.3.3-3.7.2 - 3.7.1 - Subscriber+ Arbitrary File Read vulnerability
7.5
19 hours ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Read vulnerability
7.5
19 hours ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Deletion vulnerability
8.6
19 hours ago