The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total53,658
Mitigations17,699
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
ACPT (Pro) - Custom Post Types Plugin for WordPress<= 2.0.66
Authenticated (Subscriber+) Remote Code Execution vulnerability
8.8
2 hours ago
Post SMTP<= 4.0.1
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
2 hours ago
@orpc/zod< 1.14.10
NPM: @orpc/zod: Prototype injection in smart coercion
6.5
3 hours ago
Image Slider Widget<= 1.1.130
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
File Uploads Addon for WooCommerce1.7.2-1.7.6
Unauthenticated Direct File Access vulnerability
5.9
6 hours ago
File Uploads Addon for WooCommerce1.7.2-1.7.5
Unauthenticated Customer Uploaded File Disclosure vulnerability
5.9
6 hours ago
Kit (formerly ConvertKit) for WooCommerce<= 2.2.0
Broken Access Control vulnerability
5.3
6 hours ago
Polylang<= 3.8.7
Sensitive Data Exposure vulnerability
4.3
9 hours ago
WP Event Solution<= 4.1.25
Broken Access Control vulnerability
5.3
9 hours ago
WP Event Solution<= 4.1.25
Sensitive Data Exposure vulnerability
5.3
9 hours ago
Fluent Forms Pro Add On Pack<= 6.2.13
Broken Access Control vulnerability
5.3
10 hours ago
WP Dummy Content Generator<= 4.0.0
Broken Access Control vulnerability
4.3
10 hours ago
Starter Templates<= 4.7.7
Broken Access Control vulnerability
5.4
12 hours ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.22
Broken Access Control vulnerability
6.5
12 hours ago
Taxi Booking Manager for WooCommerce<= 2.1.1
Other vulnerability Type vulnerability
5.3
12 hours ago
Sirv<= 8.2.5
SQL Injection vulnerability
8.5
12 hours ago
PowerPress Podcasting<= 11.17.9
Sensitive Data Exposure vulnerability
5.3
12 hours ago
Starter Templates<= 4.7.7
Cross Site Scripting (XSS) vulnerability
6.5
12 hours ago
JS Help Desk<= 4.0.0
Insecure Direct Object References (IDOR) vulnerability
5.4
12 hours ago
Name Directory<= 1.34.2
Cross Site Scripting (XSS) vulnerability
6.5
12 hours ago