The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total49,005
Mitigations15,808
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
JSON API User<= 4.1.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
6 minutes ago
NEX-Forms<= 9.2.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
11 minutes ago
CURCY<= 2.2.14
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.4
1 hour ago
Printcart Web to Print Product Designer for WooCommerce<= 2.5.2
Unauthenticated Arbitrary File Deletion vulnerability
8.6
1 hour ago
AR For Woocommerce<= 8.40
Unauthenticated Path Traversal to Arbitrary File Read vulnerability
7.5
1 hour ago
AR For WordPress<= 8.40
Unauthenticated Arbitrary File Read vulnerability
7.5
1 hour ago
Index Now<= 3.0.16
Cross Site Request Forgery (CSRF) vulnerability
4.3
12 hours ago
FormLayer<= 1.0.6
Sensitive Data Exposure vulnerability
5.3
12 hours ago
Exclusive Addons Elementor<= 2.7.9.9
Sensitive Data Exposure vulnerability
5.3
12 hours ago
LatePoint<= 5.6.1
Missing Authorization to Unauthenticated Arbitrary Customer Data Modification vulnerability
5.3
3 days ago
Zakra<= 4.2.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 days ago
Ad Inserter<= 2.8.16
Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure vulnerability
4.3
3 days ago
Quiz And Survey Master<= 11.1.4
Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute vulnerability
4.3
3 days ago
RTMKit<= 2.0.7
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 days ago
CM Business Directory<= 1.5.7
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 days ago
WP Import Export Lite<= 3.9.30
Authenticated (Administrator+) Server-Side Request Forgery vulnerability
5.5
3 days ago
Ninja Forms File Uploads Extension<= 3.3.29
WordPress Ninja Forms - File Uploads plugin <= 3.3.29 - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion vulnerability
5.3
3 days ago
Tonda<= 2.5
Local File Inclusion vulnerability
7.5
3 days ago
TheGem Theme Elements (for Elementor)<= 5.11.1
Local File Inclusion vulnerability
7.5
3 days ago
Struktur Core<= 2.5.1
Local File Inclusion vulnerability
7.5
3 days ago