The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,173
Mitigations16,193
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Advanced Custom Fields: Font Awesome Field<= 6.1.1
Broken Access Control vulnerability
4.3
5 minutes ago
Theme My Login<= 7.1.14
Cross Site Request Forgery (CSRF) vulnerability
4.3
11 minutes ago
Export Import Menus<= 1.9.2
Sensitive Data Exposure vulnerability
5.3
12 minutes ago
Custom CSS and JavaScript<= 2.0.16
Sensitive Data Exposure vulnerability
5.3
12 minutes ago
Forminator<= 1.56.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 minutes ago
Plugins Garbage Collector (Database Cleanup)<= 0.14
Cross Site Request Forgery (CSRF) vulnerability
6.5
13 minutes ago
Featured Video Plus<= 2.3.3
Sensitive Data Exposure vulnerability
5.3
13 minutes ago
YOP Poll7.0.0-7.0.6
Unauthenticated Vote Restriction Bypass vulnerability
5.3
15 minutes ago
TranslatePress<= 3.2.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
15 minutes ago
Content Egg<= 11.3.0
Authenticated (Author+) Arbitrary File Deletion vulnerability
6.8
18 minutes ago
SureCart<= 4.6.2
Broken Access Control vulnerability
5.3
19 minutes ago
Football Pool<= 2.13.4
Authenticated (Subscriber+) Reflected Cross-Site Scripting vulnerability
7.1
21 minutes ago
LightSync Pro<= 2.1.6
Authenticated (Author+) Arbitrary File Upload vulnerability
9.1
24 minutes ago
Cost Calculator Builder<= 3.6.17
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
27 minutes ago
Independent Analytics - Google Analytics Alternative for WordPress<= 2.15.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
28 minutes ago
TranslatePress<= 3.2.5
Reflected Cross-Site Scripting vulnerability
7.1
34 minutes ago
Login/Signup Popup< 3.2.5
Unauthenticated Account Takeover vulnerability
9.8
37 minutes ago
ChamaWP< 1.0.13
Unauthenticated PHP Object Injection vulnerability
9.8
2 hours ago
AcyMailing SMTP Newsletter< 10.11.1
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
MailChimp Forms by MailMunch<= 3.2.7
Missing Authorization to Authenticated (Subscriber+) MailMunch Integration Takeover vulnerability
8.1
2 hours ago