The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,947
Mitigations16,594
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Depicter Slider< 4.8.0
Editor+ Arbitrary File Upload via ZIP Import vulnerability
9.1
7 minutes ago
Kirki< 6.2.3
Editor+ Stored XSS via Font Zip Upload vulnerability
6.5
9 minutes ago
GutenKit<= 2.4.15
Contributor+ Mailchimp Audience Data Disclosure vulnerability
4.3
12 minutes ago
Admin and Site Enhancements (ASE)< 9.0.1
Author+ Stored XSS via SVG Upload over XML-RPC vulnerability
5.9
13 minutes ago
GutenKit< 2.5.0
Author+ Stored XSS via SVG Upload vulnerability
5.9
13 minutes ago
Royal Elementor Addons< 1.7.1066
Admin+ Remote Code Execution via Widget Builder vulnerability
7.2
16 minutes ago
SG AI Studio<= 1.2.7
Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint vulnerability
4.3
17 minutes ago
Events Made Easy<= 3.2.5
Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property vulnerability
7.5
18 minutes ago
Membership For WooCommerce< 3.1.2
Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass vulnerability
5.3
19 minutes ago
WPS Bidouille< 1.33.5
Subscriber+ User Email Disclosure via wps_get_users vulnerability
5.3
19 minutes ago
KiviCare< 4.5.4
Patient+ Arbitrary Media Attachment Read via IDOR vulnerability
4.3
20 minutes ago
KiviCare< 4.5.4
Patient+ Cross-Patient Appointment Modification via IDOR vulnerability
4.3
27 minutes ago
Easy Appointments< 4.0.1
Contributor+ Sensitive Information Disclosure via REST Appointments Listing vulnerability
4.3
28 minutes ago
Broken Link Checker< 2.4.12
Unauthenticated RCE via Query Variable Injection vulnerability
10
37 minutes ago
TrueBooker< 1.2.7
Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked vulnerability
5.3
44 minutes ago
TrueBooker< 1.2.7
Unauthenticated Customer PII Disclosure via Multiple AJAX Actions vulnerability
5.3
45 minutes ago
TrueBooker< 1.2.7
Unauthenticated Account Takeover via Multiple AJAX Actions vulnerability
9.8
45 minutes ago
TrueBooker< 1.2.7
Unauthenticated Arbitrary Appointment Status Change via update_appointment_status vulnerability
5.3
45 minutes ago
WP Maps< 4.9.8
Subscriber+ Unlimited Autoloaded Option Creation vulnerability
5.4
54 minutes ago
JetEngine< 3.8.14
Author+ Stored XSS via SVG Upload vulnerability
5.9
55 minutes ago