The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,770
Mitigations16,889
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
memberdash<= 1.8.5
Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter vulnerability
9.8
13 minutes ago
Nokri<= 1.6.4
WordPress Nokri - Job Board WordPress theme plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover vulnerability
8.8
20 minutes ago
Otter - Gutenberg Block<= 3.1.7
Missing Authorization to Unauthenticated Purchase Verification Bypass vulnerability
5.3
1 hour ago
Masteriyo - LMS<= 2.2.0
Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion vulnerability
5.3
1 hour ago
Powerkit<= 3.0.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing vulnerability
6.5
1 hour ago
Flamingo<= 2.6.2
Authenticated (Contributor+) Missing Authorization to Unauthorized Tag Information Disclosure via wp.getTerms and ajax-tag-search vulnerability
4.3
1 hour ago
SEO Flow by LupsOnline3.0.0-3.0.2
Unauthenticated Privilege Escalation vulnerability
9.8
1 hour ago
Ninja Forms3.14.10-3.15.1
Unauthenticated Arbitrary Shortcode Execution vulnerability
4.8
22 hours ago
Redirection for Contact Form 72.2.7-3.2.10
Unauthenticated Arbitrary Shortcode Execution vulnerability
4.8
22 hours ago
JetFormBuilder< 3.6.5.2
Unauthenticated Email Header Injection vulnerability
4.8
22 hours ago
Bold Page Builder< 5.9.9
Contributor+ Stored XSS vulnerability
6.5
1 day ago
Real Estate Papi<= 1.0.5
Subscriber+ Plugin Installation vulnerability
4.3
1 day ago
Jetpack16.1-16.1.2
WordPress Jetpack plugin 3.2 - 16.1.2 - Missing Authorization on WPCOM Media API Attachment Parent vulnerability
4.3
1 day ago
Jetpack16.1-16.1.2
Authenticated (Administrator+) PHP Object Injection vulnerability
7.2
1 day ago
Ninja Forms - Save Progress<= 3.0.30
WordPress Ninja Forms - Save Progress plugin <= 3.0.30 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Data Deletion via admin-ajax.php with admin_init Hook vulnerability
4.3
1 day ago
LearnDash LMS4.25.0-5.1.6
WordPress LearnDash LMS plugin 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint vulnerability
5.4
1 day ago
FooGallery<= 3.3.2
Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute vulnerability
6.5
1 day ago
Pods<= 3.3.9.1
Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute vulnerability
6.5
1 day ago
Custom Contact Forms<= 7.16
Missing Authorization to Authenticated (Contributor+) Arbitrary Post Deletion and Post Meta Modification via Nested 'fields[].ID' / 'choices[].ID' Parameters vulnerability
4.3
1 day ago
YT Player< 2.1.0
Contributor+ SQLi vulnerability
7.6
2 days ago