The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,836
Mitigations17,247
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
BA Book Everything<= 1.8.27
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 minute ago
Modula Image Gallery<= 3.0.2
Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) vulnerability
8.1
6 minutes ago
wpForo Forum<= 3.1.6
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
7 minutes ago
GeoDirectory<= 2.8.181
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
15 minutes ago
Contact Form by WPForms<= 2.0.2
Reflected Cross-Site Scripting vulnerability
7.1
48 minutes ago
Zero Spam<= 5.7.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
52 minutes ago
MasterStudy LMS2.3.0-3.7.49
Unauthenticated Account Creation with Registration Disabled vulnerability
5.3
58 minutes ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer< 2.34.0
Unauthenticated Connection Secret Disclosure and Deletion vulnerability
6.5
58 minutes ago
Contact Form by WPForms1.8.8.2-2.0.1
Unauthenticated Stripe Refund and Subscription Cancellation vulnerability
6.8
1 hour ago
BP Better Messages<= 3.0.4
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
1 hour ago
wpForo Forum< 3.1.6
Subscriber+ PHP Object Injection vulnerability
8.8
1 hour ago
CMB2< 2.13.0
Subscriber+ Arbitrary Option Corruption vulnerability
6.8
1 hour ago
WP Maps<= 4.9.8
Authenticated (Subscriber+) Local File Inclusion vulnerability
7.5
1 hour ago
Elementor Website Builder<= 4.3.1
Cross Site Request Forgery (CSRF) vulnerability
8.8
2 hours ago
Knit Pay<= 9.6.1.0
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
11 hours ago
Wawp<= 4.8.6
Unauthenticated Privilege Escalation vulnerability
9.8
11 hours ago
s2Member<= 260814
Unauthenticated Remote Code Execution vulnerability
8.8
11 hours ago
Optima Express + MarketBoost IDX Plugin<= 8.7.5
Unauthenticated Privilege Escalation to 'ihf_clear_cache' AJAX Action to Author Role Assignment vulnerability
7.3
11 hours ago
cline< 3.0.30
NPM: Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)
8.8
13 hours ago
@rsdoctor/rspack-plugin<= 1.5.15
NPM: @rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata
7.5
13 hours ago