The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total57,134
Mitigations19,318
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Product Feed PRO for WooCommerce<= 13.5.8
Content Injection vulnerability
5.3
29/11/2026
Spectra<= 2.20.5
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
WooCommerce11.0.0-11.2.2
Race Condition vulnerability
6.5
1 hour ago
WebinarIgnition<= 4.27.125
Insecure Direct Object References (IDOR) vulnerability
5.3
1 hour ago
Brizy<= 2.8.25
Broken Access Control vulnerability
5.3
1 hour ago
MapSVG<= 9.0.4
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Royal Elementor Addons<= 1.7.1070
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Gutenberg Blocks<= 3.7.6
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
YITH WooCommerce Ajax Product Filter<= 5.24.0
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Spectra<= 2.20.5
Broken Access Control vulnerability
5.3
1 hour ago
Gutenberg Blocks<= 3.7.6
Sensitive Data Exposure vulnerability
5.3
1 hour ago
We’re Open!<= 2.8
Content Injection vulnerability
5.3
1 hour ago
NextGEN Gallery<= 4.5.5
Authenticated (Custom+) Arbitrary File Deletion vulnerability
8.1
6 hours ago
Drag and Drop File Upload for Elementor Forms<= 1.6.2
Unauthenticated Arbitrary File Deletion vulnerability
8.6
6 hours ago
Advance Guest Post<= 1.9
Unauthenticated Arbitrary File Upload vulnerability
10
6 hours ago
Advance Guest Post<= 1.9
Unauthenticated Arbitrary File Upload vulnerability
10
6 hours ago
Advance Guest Post<= 1.9
Unauthenticated Arbitrary Attachment Deletion vulnerability
8.6
6 hours ago
WooCommerce Vindi Pagamento<= 0.8.3
Unauthenticated Stored XSS vulnerability
7.1
6 hours ago
Chatterbug Forms – Fast, Flexible WordPress Form Builder<= 1.0.2
Unauthenticated Arbitrary File Upload vulnerability
10
6 hours ago
EZ SQL Reports Shortcode Widget and DB Backup<= 5.25.25
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago