The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,788
Mitigations16,917
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Ninja Forms - Scheduled Exports<= 3.0.3
WordPress Ninja Forms - Scheduled Exports plugin <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API Parameters vulnerability
6.5
7 hours ago
Contact Form by Supsystic<= 1.10.2
Unauthenticated Stored Cross-Site Scripting via IP Address Header vulnerability
7.1
7 hours ago
HT Menu< 1.2.7
Subscriber+ Stored XSS vulnerability
6.5
8 hours ago
JCH Optimize< 6.0.1
Subscriber+ Stored XSS vulnerability
6.5
8 hours ago
IPGP Visitors Origin< 1.6
Reflected XSS vulnerability
7.1
8 hours ago
JetFormBuilder< 3.6.5.2
Unauthenticated Stored XSS vulnerability
7.1
8 hours ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.17
Reflected Cross-Site Scripting via 'formData[id]' Parameter vulnerability
7.1
8 hours ago
SureForms<= 2.12.2
Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload vulnerability
7.1
9 hours ago
QuickCal - Appointment Booking Calendar for WordPress<= 1.0.20
Unauthenticated Stored Cross-Site Scripting via Custom Field Parameters vulnerability
7.1
9 hours ago
Beaver Builder Plugin (Starter Version)<= 2.11.0.1
Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter vulnerability
7.1
9 hours ago
iubenda<= 3.13.4
Unauthenticated Stored Cross-Site Scripting via Comment Content via AdSense Regex Rewrite vulnerability
7.1
10 hours ago
iubenda<= 3.13.4
Unauthenticated Stored Cross-Site Scripting via Comment Content vulnerability
7.1
10 hours ago
Music Store< 1.4.5
Unauthenticated SQLi vulnerability
9.3
11 hours ago
JetFormBuilder< 3.6.5.2
Unauthenticated Password Hash and Arbitrary Metadata Disclosure vulnerability
7.5
11 hours ago
SureCart< 4.6.3
Subscriber+ Administrator Account Takeover vulnerability
8.8
11 hours ago
WP Fusion (Pro)<= 3.47.13
Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter vulnerability
7.5
11 hours ago
HivePress Authentication<= 1.1.4
Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator vulnerability
7.5
11 hours ago
Frontend Admin by DynamiApps<= 3.29.12
Unauthenticated Account Takeover via '_acf_objects' Object Identifier vulnerability
9.8
11 hours ago
memberdash<= 1.8.5
Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter vulnerability
9.8
12 hours ago
Nokri<= 1.6.4
WordPress Nokri - Job Board WordPress theme plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover vulnerability
8.8
12 hours ago