The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,326
Mitigations16,720
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Fusion Builder<= 3.15.6
Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' Shortcode Attribute vulnerability
6.5
1 hour ago
LiteSpeed Cache<= 7.7
Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes vulnerability
5.9
1 hour ago
Smart Slider 3<= 3.5.1.38
Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attribute vulnerability
6.5
1 hour ago
libreoffice-convert< 1.8.2
NPM: libreoffice-convert vulnerable to path traversal / arbitrary file write
6.5
3 hours ago
n8n-nodes-sqlite3< 1.0.0
NPM: n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)
6.1
4 hours ago
FoodBoxBooker< 1.0.7
Unauthenticated Arbitrary Password Reset vulnerability
9.8
8 hours ago
AI Engine3.3.3-3.7.1
WordPress AI Engine plugin 3.3.3-3.7.2 - 3.7.1 - Subscriber+ Arbitrary File Read vulnerability
7.5
8 hours ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Read vulnerability
7.5
8 hours ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Deletion vulnerability
8.6
8 hours ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Upload vulnerability
9.9
8 hours ago
WpEvently<= 5.5.0
Broken Access Control vulnerability
4.3
8 hours ago
WpEvently<= 5.5.0
Broken Access Control vulnerability
5.4
8 hours ago
WP Job Portal<= 2.5.9
Insecure Direct Object References (IDOR) vulnerability
4.3
8 hours ago
RestrictMate< 1.3.0
Unauthenticated Privilege Escalation to Administrator vulnerability
9.8
8 hours ago
WPCargo Track & Trace< 8.0.4
Unauthenticated SQL Injection via wpcargo_tracking_number vulnerability
9.3
9 hours ago
ACF Extended<= 0.9.2.6
Broken Access Control vulnerability
4.3
9 hours ago
All-in-One Video Gallery< 4.9.2
Subscriber+ Server-Side Request Forgery via 'vdl' Parameter vulnerability
6.4
9 hours ago
Forminator< 1.57.0.5
Admin+ Network-Wide RCE via Hub Connector API Key on Multisite vulnerability
7.2
9 hours ago
MC4WP<= 4.12.0
Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages vulnerability
5.9
9 hours ago
Post Duplicator<= 3.0.11
Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution vulnerability
4.3
9 hours ago