The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total56,036
Mitigations18,865
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
The Events Calendar<= 6.18.2
Cross Site Scripting (XSS) vulnerability
6.5
4 minutes ago
JetFormBuilder<= 3.6.7.1
Content Injection vulnerability
5.3
4 minutes ago
Webba Booking<= 6.5.4
Broken Access Control vulnerability
5.4
5 minutes ago
Redux Framework<= 4.5.15
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
8 minutes ago
Email Customizer for WooCommerce (Pro)<= 3.9.5
Authenticated (Subscriber+) Remote Code Execution vulnerability
8.8
9 minutes ago
The Events Calendar<= 6.18.2
Broken Access Control vulnerability
5.3
11 minutes ago
JetFormBuilder<= 3.6.7.1
Broken Access Control vulnerability
5.3
12 minutes ago
Modern Events Calendar Lite< 7.36.4
Subscriber+ Arbitrary Post Modification vulnerability
6.5
18 minutes ago
@nx/gradle>= 21.0.0, < 22.7.9
npm: @nx/maven and @nx/gradle have OS command injection via nx.json plugin options
7.3
30 minutes ago
@nx/maven>= 22.0.2, < 22.7.9
npm: @nx/maven and @nx/gradle have OS command injection via nx.json plugin options
7.3
30 minutes ago
Timetics<= 1.0.65
Broken Access Control vulnerability
5.3
31 minutes ago
The Events Calendar<= 6.18.2
Cross Site Scripting (XSS) vulnerability
6.5
32 minutes ago
Blocksy Companion<= 2.1.60
Cross Site Scripting (XSS) vulnerability
6.5
33 minutes ago
Enable Media Replace4.1.4-4.2.2
Unauthenticated PHP Object Injection vulnerability
7.5
5 hours ago
WP Visitor Statistics (Real Time Traffic)< 8.8
Unauthenticated Stored XSS vulnerability
7.1
6 hours ago
WP User Frontend< 4.3.14
Reflected XSS vulnerability
7.1
6 hours ago
Security & Malware scan by CleanTalk< 2.191
Unauthenticated Authentication Bypass vulnerability
8.1
6 hours ago
Firelight Lightbox< 2.3.23
Contributor+ Stored XSS vulnerability
6.5
9 hours ago
BuddyForms< 2.10.1
Subscriber+ Arbitrary Post Modification vulnerability
5.3
9 hours ago
BuddyForms< 2.10.3
Unauthenticated Form Configuration Disclosure vulnerability
5.3
9 hours ago