The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total56,297
Mitigations19,016
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Form Maker by 10Web< 1.15.51
Unauthenticated Stored XSS vulnerability
7.1
4 hours ago
GTM Server Side< 2.3.11
Unauthenticated SSRF and Same-Origin XSS vulnerability
7.1
4 hours ago
Essential Real Estate4.4.3-5.3.4
Subscriber+ Arbitrary Media Attachment Deletion vulnerability
6.5
4 hours ago
Booking Package< 1.7.34
Unauthenticated Payment Bypass vulnerability
5.3
4 hours ago
Duplicator Pro< 5.1.0
Reflected XSS vulnerability
7.1
4 hours ago
Duplicator< 5.1.0
Reflected XSS vulnerability
7.1
4 hours ago
Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance<= 1.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
Slim Jetpack<= 2.7.0.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
Mobile builder<= 1.4.2
Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters vulnerability
8.8
5 hours ago
Import and export users and customers<= 2.5.11
Authenticated (Custom+) Privilege Escalation vulnerability
8.8
5 hours ago
Simple Download Monitor< 4.1.3
Contributor+ Private Download Item Title and Description Disclosure vulnerability
4.3
6 hours ago
EventPrime< 4.3.6.1
Unauthenticated Pending Post Disclosure vulnerability
5.3
6 hours ago
WPDM – Premium Packages< 7.3.1
Subscriber+ Guest Order Takeover vulnerability
5.4
6 hours ago
VikWidgetsLoader< 1.12.3
Contributor+ Stored XSS vulnerability
6.5
6 hours ago
All-in-One Video Gallery< 5.0.0
Contributor+ Stored XSS vulnerability
6.5
6 hours ago
WPDM – Premium Packages< 7.3.1
Unauthenticated Cross-User Saved Cart Disclosure vulnerability
5.3
6 hours ago
WPDM – Premium Packages< 7.3.1
Unauthenticated Guest Order Status Disclosure vulnerability
3.7
6 hours ago
WPvivid Backup and Migration< 0.9.138
Admin+ Path Traversal vulnerability
5.5
6 hours ago
Duplicator Pro< 5.1.0
Subscriber+ SQLi vulnerability
4.8
6 hours ago
Duplicator< 5.1.0
Subscriber+ SQLi vulnerability
4.8
6 hours ago