The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,499
Mitigations19,129
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP Data Access<= 5.5.89
Incorrect Authorization to Unauthenticated Privilege Escalation vulnerability
9.8
Just now
WS Form LITE<= 1.12.18
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 minute ago
WPJAM Basic<= 7.1
Unauthenticated Privilege Escalation to 'data[args][role]' Parameter vulnerability
9.8
1 minute ago
Real Testimonials<= 4.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 minutes ago
Advanced Form Integration<= 2.10.2
Unauthenticated PHP Object Injection vulnerability
9.8
3 minutes ago
TranslatePress<= 3.3.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 minutes ago
QA Analytics<= 5.3.0
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
9.8
4 minutes ago
WP Data Access<= 5.5.89
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
5 minutes ago
WP Data Access<= 5.5.89
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
5 minutes ago
Amelia9.0-9.9.1
Missing Authorization to Unauthenticated Arbitrary Event Attendee Data Exposure vulnerability
7.5
7 minutes ago
Naimur Email OTP Verification for WooCommerce<= 2.1.0
Unauthenticated Authentication Bypass to Account Takeover vulnerability
9.8
8 minutes ago
Ultimate Member<= 2.14.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
23 minutes ago
WP Visitor Statistics (Real Time Traffic)<= 8.7.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
23 minutes ago
Football Pool<= 2.13.5
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
24 minutes ago
wpForo Forum<= 3.2.1
Unauthenticated SQL Injection vulnerability
9.3
24 minutes ago
wpForo Forum<= 3.2.2
Authenticated (Subscriber+) Privilege Escalation to 'data[secondary_groupids]' CSV Parameter vulnerability
7.5
24 minutes ago
SEOPress<= 10.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
27 minutes ago
wpForo Forum<= 3.2.2
Authenticated (Subscriber+) Arbitrary File Deletion vulnerability
6.5
27 minutes ago
wpForo Forum<= 3.2.2
Unauthenticated SQL Injection vulnerability
9.3
27 minutes ago
Real Testimonials<= 4.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
28 minutes ago