The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,285
Mitigations17,920
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Kirki<= 6.3.1
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
2 minutes ago
WP Meteor Page Speed Optimization Topping<= 3.4.18
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 minutes ago
WPO365<= 44.1
Unauthenticated Authentication Bypass vulnerability
8.1
4 minutes ago
WP Directory Kit<= 1.5.9
Authenticated (Subscriber+) SQL Injection vulnerability
6.5
8 minutes ago
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels<= 5.0.2
Insecure Direct Object Reference to Unauthenticated Unauthorized Order Document Access vulnerability
7.5
9 minutes ago
WPDM – Premium Packages<= 7.2.6
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
9 minutes ago
WPCOM Member<= 1.7.27
Unauthenticated Authentication Bypass vulnerability
9.8
10 minutes ago
Contact Form by WPForms<= 2.0.2.1
Reflected Cross-Site Scripting vulnerability
7.1
10 minutes ago
WP User Frontend<= 4.3.12
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
11 minutes ago
WP Photo Album Plus<= 9.3.03.002
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
11 minutes ago
WP File Download<= 6.3.9
Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification vulnerability
8.1
1 hour ago
PostX<= 5.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer<= 2.34.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Presto Player<= 4.5.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Rocket Lazy Load<= 2.4.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Stripe For WooCommerce<= 4.0.17
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
Simple Membership<= 4.8.4
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Noptin<= 4.3.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Podlove Podcast Publisher<= 4.5.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
WP Booking System<= 2.1.0.1
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
1 hour ago