The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,585
Mitigations16,407
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Modal Survey<= 2.0.2.2.3
Insecure Direct Object References (IDOR) vulnerability
4.3
21 minutes ago
Slider by 10Web<= 1.2.62
CSRF to Arbitrary File Deletion vulnerability
7.4
22 minutes ago
Featured Video Plus<= 2.3.3
Cross Site Scripting (XSS) vulnerability
6.5
24 minutes ago
WPZOOM Forms – Contact Form Plugin for Gutenberg<= 2.0.4
Cross Site Scripting (XSS) vulnerability
6.5
25 minutes ago
Frontend Admin by DynamiApps<= 3.29.10
Cross Site Scripting (XSS) vulnerability
6.5
25 minutes ago
Login With Ajax<= 4.5.1
Cross Site Scripting (XSS) vulnerability
6.5
26 minutes ago
Video Conferencing with Zoom<= 4.6.8
Cross Site Scripting (XSS) vulnerability
6.5
28 minutes ago
Wufoo Shortcode<= 1.55
Cross Site Scripting (XSS) vulnerability
6.5
42 minutes ago
Typing Effect<= 1.3.7
Cross Site Scripting (XSS) vulnerability
6.5
43 minutes ago
WP Tab Widget<= 1.2.11
Cross Site Scripting (XSS) vulnerability
6.5
46 minutes ago
GeoDirectory<= 2.8.172
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Podlove Podcast Publisher<= 4.5.3
Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter vulnerability
8.8
1 hour ago
PPWP<= 1.9.20
Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update vulnerability
4.3
1 hour ago
ProfilePress<= 4.16.19
Authenticated (Subscriber+) Arbitrary Shortcode Execution via First Name / Last Name Profile Field vulnerability
5.4
1 hour ago
NEX-Forms<= 9.2.4
Authenticated (Admin+) SQL Injection via 'additional_params' Parameter vulnerability
7.6
1 hour ago
Bookly<= 27.7
WordPress Online Scheduling and Appointment Booking System - Bookly plugin <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameter vulnerability
4.3
1 hour ago
Loco Translate<= 2.8.7
Authenticated (Translator+) Stored Cross-Site Scripting via PO File Extracted Comments vulnerability
6.5
1 hour ago
Kubio AI Page Builder<= 2.8.5
Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action vulnerability
4.3
1 hour ago
Gravity Booster &#8211; Styles &amp; Layouts for Gravity Forms<= 5.26
Authenticated (Editor+) Stored Cross-Site Scripting via 'stylerSettings' Parameter vulnerability
6.5
1 hour ago
Fullscreen Galleria<= 1.6.12
Authenticated (Contributor+) SQL Injection via 'href' Attribute in Post Content vulnerability
8.5
1 hour ago