The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,805
Mitigations18,182
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
GeoDirectory<= 2.8.191
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 minutes ago
ProfilePress<= 4.17.5
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
2 minutes ago
SureCart<= 4.9.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 minutes ago
Tutor LMS<= 4.1.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 minutes ago
User Registration & Membership Pro<= 6.2.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 minutes ago
Vulnity Security<= 1.4.3
Unauthenticated Authentication Bypass to Administrator vulnerability
8.1
6 minutes ago
WP Sessions Time Monitoring Full Automatic<= 1.1.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
8 minutes ago
Events Made Easy<= 3.2.22
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
10 minutes ago
SureDash<= 1.12.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
10 minutes ago
Social Share Buttons<= 1.30
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
11 minutes ago
Mobile builder<= 1.4.2
Unauthenticated SQLi vulnerability
6.8
18 minutes ago
DoubleScale CRM | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More<= 1.5.1
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
18 minutes ago
Subscribe to Comments< 2.3.3
Unauthenticated Subscription Management Key Disclosure vulnerability
6.5
18 minutes ago
Salon booking system< 10.31.9
Unauthenticated Salon REST API Access vulnerability
4.8
18 minutes ago
WP Photo Album Plus<= 9.3.02.002
Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action vulnerability
8.8
18 minutes ago
CP Multi View Event Calendar <= 1.4.42
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
19 minutes ago
Sunshine Photo Cart<= 3.7.4
Unauthenticated PHP Object Injection vulnerability
9.8
20 minutes ago
Vitepos<= 3.5.1
Unauthenticated SQL Injection vulnerability
9.3
20 minutes ago
FiboSearch<= 1.34.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
20 minutes ago
WX Subscribe 微信支付付费订阅<= 1.2.1
Unauthenticated SQLi vulnerability
6.8
24 minutes ago