The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total54,201
Mitigations17,876
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
FooSales< 1.43.3
Cashier+ Privilege Escalation vulnerability
8.8
10 minutes ago
Dashboard Notes<= 1.0.3
Cross Site Request Forgery (CSRF) vulnerability
7.1
1 hour ago
Before After Image Comparison – Image comparison for WP<= 1.1.21
Broken Access Control vulnerability
5.4
2 hours ago
WPFunnels<= 3.13.3
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
All Bootstrap Blocks<= 1.3.31
Sensitive Data Exposure vulnerability
4.3
2 hours ago
Asgaros Forum<= 3.4.0
Broken Access Control vulnerability
4.3
2 hours ago
Html5 Audio Player<= 2.8.8
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
Restrict User Access – Membership Plugin with Force<= 2.8.1
Broken Access Control vulnerability
5.3
2 hours ago
WP Event Manager<= 3.4.1
Broken Access Control vulnerability
5.4
2 hours ago
Scripts n Styles<= 3.5.8
Broken Access Control vulnerability
5.3
3 hours ago
AI Translation for Polylang<= 1.6.2
Broken Access Control vulnerability
5.4
3 hours ago
Super Payments< 1.43.1
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
3 hours ago
GDPR Data Request Form1.5-1.7.1
DPO Email Update vulnerability
4.3
3 hours ago
JetBlocks For Elementor<= 1.5.2.1
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
Kirki< 6.3.2
Editor+ Blind SSRF vulnerability
4.1
6 hours ago
Ocean Pro Demos<= 1.5.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.2
7 hours ago
Ocean eComm Treasure Box<= 1.8.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.2
7 hours ago
Redux Framework<= 4.5.11
Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation vulnerability
6.8
7 hours ago
Code Snippets< 3.10.0
Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite) vulnerability
6.8
8 hours ago
Code Snippets< 3.10.0
Admin+ Network-Scoped Snippet Activation and Deactivation vulnerability
3.3
8 hours ago