The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,368
Mitigations16,786
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Forminator< 1.57.0.7
Authenticated Privilege Escalation vulnerability
9.8
1 hour ago
Amelia9.0-9.7
Provider+ Arbitrary Provider Password Update vulnerability
4.7
1 hour ago
Events Manager<= 7.4.0.1
Reflected Cross-Site Scripting via 'header_format' Parameter vulnerability
7.1
1 hour ago
All-in-One WP Migration Unlimited Extension<= 2.84
Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter vulnerability
6.5
1 hour ago
Return Refund and Exchange For WooCommerce< 4.6.4
Unauthenticated Guest Order Message Disclosure and Manipulation vulnerability
6.5
1 hour ago
Customer Reviews for WooCommerce<= 5.106.0
Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form vulnerability
7.1
1 hour ago
Squeeze< 1.7.12
Author+ Arbitrary File Upload vulnerability
9.1
1 hour ago
Pods< 3.3.9.1
Author+ RCE vulnerability
9.1
1 hour ago
12 Step Meeting List3.17-3.19.16
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
AI Engine3.4.0-3.7.1
Unauthenticated Arbitrary AI Query Execution vulnerability
5.6
1 hour ago
CMP – Coming Soon & Maintenance< 4.1.18
Editor+ Privilege Escalation vulnerability
9.8
1 hour ago
Document Embedder< 2.3.1
Unauthenticated Private Document Download vulnerability
5.3
1 hour ago
Order Tip for WooCommerce< 1.6.0
Shop Manager+ Arbitrary File Deletion vulnerability
8.6
1 hour ago
TranslatePress<= 3.2.6
Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor vulnerability
6.5
1 hour ago
Content Mask1.8.0-1.8.5.4
Contributor Publish Capability Bypass vulnerability
2.7
1 hour ago
Brave< 0.8.6
Unauthenticated Reflected XSS vulnerability
7.1
1 hour ago
Slider Hero< 9.1.3
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
Tutor LMS< 4.0.6
Instructor+ Arbitrary File Read vulnerability
7.5
1 hour ago
ProfilePress< 4.17.1
Unauthenticated Arbitrary Shortcode Execution via Display Name vulnerability
6.5
1 hour ago
ProSolution WP Client< 2.0.11
Reflected XSS via 'page' Parameter vulnerability
7.1
1 hour ago