The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total35,718
Mitigations13,213
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Turitor< 1.5.3
Local File Inclusion vulnerability
7.5
2 days ago
Digiqole< 2.2.7
Local File Inclusion vulnerability
7.5
2 days ago
Brizy<= 2.7.16
Authenticated (Contributor+) Sensitive Information Exposure via get_users Function vulnerability
6.5
2 days ago
King Addons for Elementor<= 51.1.39
Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability
6.5
2 days ago
Marquee Addons for Elementor<= 2.4.3
Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Marquee Widget vulnerability
6.5
2 days ago
Enter Addons<= 2.2.7
Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets vulnerability
6.5
2 days ago
Popup Builder<= 4.4.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 days ago
Livemesh SiteOrigin Widgets<= 3.9.1
Authenticated (Contributor+) Stored Cross-Site Scripting via Hero Header and Pricing Table Widgets vulnerability
6.5
2 days ago
TI WooCommerce Wishlist<= 2.10.0
Unauthenticated HTML Injection vulnerability
5.3
2 days ago
WidgetKit<= 2.5.6
Authenticated (Contributor+) Stored Cross-Site Scripting via Team and Countdown Widgets vulnerability
6.5
2 days ago
myCred<= 2.9.7
Missing Authorization to Unauthenticated Withdrawal Request Approval vulnerability
5.3
2 days ago
MediaCommander<= 2.3.1
Missing Authorization to Authenticated (Author+) Media Folder Deletion vulnerability
6.5
2 days ago
Lucky Draw Contests<= 4.2
Cross-Site Request Forgery to Plugin Settings Update vulnerability
4.3
2 days ago
Popover Windows<= 1.2
Missing Authorization to Authenticated (Subscriber+) Popover Configuration Update via AJAX Actions vulnerability
5.4
2 days ago
Custom Frames<= 1.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Parameter vulnerability
6.5
2 days ago
Exhibz<= 3.0.9
Local File Inclusion vulnerability
7.5
2 days ago
Shortcode Ajax<= 1.0
Unauthenticated Arbitrary Shortcode Execution via 'code' Parameter vulnerability
5.4
2 days ago
Popover Windows<= 1.2
Cross-Site Request Forgery to Arbitrary Popover Configuration Update vulnerability
4.3
2 days ago
Quick Testimonials<= 2.1
Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
5.9
2 days ago
Solutions Ad Manager<= 1.0.0
Unauthenticated Open Redirect via 'sam-redirect-to' Parameter vulnerability
4.7
2 days ago