The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,341
Mitigations16,731
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Forminator<= 1.57.1
Other vulnerability Type vulnerability
5.3
5 minutes ago
Shared Files< 1.7.67
Unauthenticated Limited File Upload vulnerability
5.3
6 minutes ago
Shared Files Pro< 1.7.70
Unauthenticated Limited File Upload vulnerability
5.3
6 minutes ago
GiveWP<= 4.16.7.1
Remote Code Execution (RCE) vulnerability
10
1 hour ago
Amelia<= 2.2
Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission vulnerability
7.1
3 hours ago
wpForo Forum<= 2.4.17
Unauthenticated SQL Injection via 'referer' Parameter vulnerability
9.3
3 hours ago
ElementsKit Pro<= 4.10.1
Unauthenticated Stored Cross-Site Scripting via 's' Parameter vulnerability
7.1
3 hours ago
Tutor LMS<= 4.0.5
Unauthenticated Remote Code Execution via 'template' and 'data' POST Parameters vulnerability
6.5
3 hours ago
One User Avatar<= 2.5.4
Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter vulnerability
6.5
3 hours ago
LiteSpeed Cache<= 7.8.1
Unauthenticated Stored Cross-Site Scripting via Comment Content vulnerability
7.1
3 hours ago
Forminator<= 1.57.0.1
Unauthenticated Stored Cross-Site Scripting via Rich-Text Textarea Field vulnerability
7.1
3 hours ago
TranslatePress<= 3.3.3
Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser vulnerability
7.1
3 hours ago
Optimole<= 4.2.10
Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter vulnerability
7.1
3 hours ago
Envira Photo Gallery<= 1.12.4
Authenticated (Author+) Stored Cross-Site Scripting via Gallery Description vulnerability
5.9
4 hours ago
GiveWP<= 4.14.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
6.5
4 hours ago
WP User Frontend< 4.3.10
Unauthenticated User Email and Phone Disclosure vulnerability
5.3
5 hours ago
Fusion Builder<= 3.15.6
Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' Shortcode Attribute vulnerability
6.5
15 hours ago
LiteSpeed Cache<= 7.7
Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes vulnerability
5.9
15 hours ago
Smart Slider 3<= 3.5.1.38
Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attribute vulnerability
6.5
16 hours ago
libreoffice-convert< 1.8.2
NPM: libreoffice-convert vulnerable to path traversal / arbitrary file write
6.5
17 hours ago