The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,264
Mitigations19,005
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance<= 1.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
10 minutes ago
Slim Jetpack<= 2.7.0.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
21 minutes ago
Mobile builder<= 1.4.2
Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters vulnerability
8.8
23 minutes ago
Import and export users and customers<= 2.5.11
Authenticated (Custom+) Privilege Escalation vulnerability
8.8
37 minutes ago
VikWidgetsLoader< 1.12.3
Contributor+ Stored XSS vulnerability
6.5
1 hour ago
All-in-One Video Gallery< 5.0.0
Contributor+ Stored XSS vulnerability
6.5
1 hour ago
Typing Text – Give your texts many typing effects< 2.2.2
Contributor+ Stored XSS vulnerability
6.5
1 hour ago
WP ERP< 1.17.11
Subscriber+ Sensitive Data Disclosure vulnerability
4.3
1 hour ago
GDPR Cookie Consent< 3.5.8
Contributor+ Stored XSS vulnerability
6.5
1 hour ago
Mollie Payments for WooCommerce< 8.2.0
Unauthenticated Unpublished Product Purchase vulnerability
3.7
1 hour ago
Mollie Payments for WooCommerce< 8.2.0
Unauthenticated Payment Surcharge Bypass vulnerability
3.7
1 hour ago
Simple Cloudflare Turnstile<= 1.44.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
10 hours ago
@enspirit/elo<= 1.0.0
npm: Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access
9.8
13 hours ago
@enspirit/elo<= 1.0.0
npm: Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
9.8
13 hours ago
@enspirit/elo<= 1.0.0
npm: Elo backends have code injection via unvalidated emission of programmatic AST fields
7.4
13 hours ago
ClickCease Click Fraud Protection<= 3.3.0
Broken Access Control vulnerability
5.3
14 hours ago
myCred<= 4.0.2
Broken Access Control vulnerability
4.3
14 hours ago
AnyWhere Elementor<= 1.3.0
Broken Access Control vulnerability
5.3
14 hours ago
Elementor Website Builder<= 4.3.5
Cross Site Scripting (XSS) vulnerability
6.5
14 hours ago
myCred<= 4.0.2
Broken Access Control vulnerability
4.3
14 hours ago