The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,763
Mitigations18,164
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@adonisjs/http-server<= 8.2.1
NPM: AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
0
12 minutes ago
WPDM – Premium Packages<= 7.2.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Schema & Structured Data for WP & AMP<= 1.67
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
SiteOrigin CSS<= 1.6.7
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
Infinite Uploads<= 3.4.1
Sensitive Data Exposure vulnerability
6.5
2 hours ago
PlanetStudio Payment Gateway<= 1.3.3
Broken Access Control vulnerability
5.3
2 hours ago
Presto Player<= 4.5.3
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
Login with phone number<= 1.8.77
Broken Access Control vulnerability
4.3
2 hours ago
Ultimate Addons for Contact Form 7<= 3.5.54
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
SQL Chart Builder<= 3.0.6
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Knowledge Base<= 3.2.0
Broken Access Control vulnerability
5.3
2 hours ago
WPConsent<= 1.1.9
Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS) vulnerability
7.1
2 hours ago
Flexible Quantity – Measurement Price Calculator for WooCommerce<= 2.3.23
Broken Access Control vulnerability
5.3
2 hours ago
Download Monitor<= 5.3.3
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
HivePress<= 1.7.32
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Simply Schedule Appointments<= 1.6.12.35
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
GeoDirectory<= 2.8.192
Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom Field vulnerability
6.5
2 hours ago
TranslatePress<= 3.3.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
YaySMTP<= 2.7.7
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
2 hours ago
Sunshine Photo Cart<= 3.7.4
Broken Access Control vulnerability
5.3
2 hours ago