The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,733
Mitigations18,146
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Search Regex<= 3.5
Authenticated (Subscriber+) Remote Code Execution vulnerability
8
3 minutes ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer<= 2.34.5
Unauthenticated Limited File Write / Cache Poisoning vulnerability
7.5
4 minutes ago
Theme My Login<= 7.2.1
Unauthenticated Privilege Escalation vulnerability
9.8
5 minutes ago
Profile Builder<= 4.0.3
Unauthenticated Privilege Escalation to 'role' Parameter vulnerability
8.1
7 minutes ago
MDTF<= 1.4.0
Cross Site Scripting (XSS) vulnerability
6.5
7 minutes ago
Simply Schedule Appointments<= 1.6.12.35
Insecure Direct Object References (IDOR) vulnerability
6.3
8 minutes ago
Booking and Rental Manager<= 2.8.0
Other vulnerability Type vulnerability
5.3
8 minutes ago
ELEX WordPress HelpDesk & Customer Ticketing System<= 3.3.7
Unauthenticated Arbitrary File Upload vulnerability
9.8
9 minutes ago
AI Engine<= 3.8.3
Broken Access Control vulnerability
4.3
9 minutes ago
WordLift<= 3.54.15
Broken Access Control vulnerability
5.4
9 minutes ago
JetSmartFilters<= 3.8.6
Cross Site Scripting (XSS) vulnerability
6.5
10 minutes ago
APIExperts Square for WooCommerce<= 4.7.5
Broken Access Control vulnerability
5.3
11 minutes ago
Strong Testimonials<= 3.3.12
Broken Access Control vulnerability
4.3
12 minutes ago
WP Map Block<= 3.0.0
Missing Authorization to Authenticated (Contributor+) Arbitrary Map Publish/Unpublish/Delete via set_status() and bulk() REST Endpoints vulnerability
4.3
13 minutes ago
HUSKY<= 1.4.5
Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script vulnerability
5.3
14 minutes ago
WP Booking System<= 2.1.0.1
Authenticated (Administrator+) SQL Injection via 'orderby' Parameter vulnerability
7.6
14 minutes ago
User Registration<= 5.2.8
Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name vulnerability
4.3
16 minutes ago
My Calendar<= 3.8.7
Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute
9.8
19 minutes ago
Mang Board WP<= 2.4.4
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
25 minutes ago
Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing &amp; Smart Insights<= 1.9.2.1
Unauthenticated Stored DOM-Based Cross-Site Scripting via 'targetUrl' Parameter vulnerability
7.1
32 minutes ago