The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total56,057
Mitigations18,924
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Fluent CRM<= 3.2.6
Broken Access Control vulnerability
5.3
37 minutes ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.26
Broken Access Control vulnerability
4.3
38 minutes ago
BookIt<= 2.6.0.6
Broken Access Control vulnerability
4.3
38 minutes ago
Booktics<= 1.0.31
Broken Access Control vulnerability
4.3
39 minutes ago
Event Tickets<= 5.30.2
Broken Access Control vulnerability
4.3
39 minutes ago
Ultimate Addons for Elementor - Lite<= 2.9.5
WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability
6.5
41 minutes ago
GIFTiT &#8211; Free Gifts for WooCommerce<= 4.5
Content Injection vulnerability
5.3
42 minutes ago
Divi Contact Form 7<= 4.1.0
Content Injection vulnerability
5.3
43 minutes ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.26
Local File Inclusion vulnerability
6.5
45 minutes ago
Booktics<= 1.0.31
Broken Access Control vulnerability
5.3
46 minutes ago
APIExperts Square for WooCommerce<= 4.7.5
Cross Site Request Forgery (CSRF) vulnerability
5.4
2 hours ago
AI Engine<= 3.8.8
Cross Site Request Forgery (CSRF) vulnerability
8.8
2 hours ago
Event Tickets<= 5.30.2
Broken Access Control vulnerability
4.3
2 hours ago
Media Player Addons for Elementor – Media Player widget for WP<= 1.1.10
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
The Events Calendar<= 6.18.2
Broken Access Control vulnerability
5.4
2 hours ago
Easy Digital Downloads<= 3.7.2
Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability
8.1
3 hours ago
Essential Addons for Elementor<= 6.8.7
Unauthenticated Privilege Escalation to 'page_id' Parameter vulnerability
7.4
3 hours ago
Fluent CRM<= 3.2.6
Broken Access Control vulnerability
5.4
3 hours ago
The Events Calendar<= 6.18.2
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
JetFormBuilder<= 3.6.7.1
Content Injection vulnerability
5.3
3 hours ago