The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,456
Mitigations17,123
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP2Social Auto Publish<= 2.4.12
Authenticated (Administrator+) Stored Cross-Site Scripting via 'pages' Parameter vulnerability
5.9
13 minutes ago
Hotel Booking Lite< 6.2.3
Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint vulnerability
5.3
14 minutes ago
SEO Booster<= 7.4.7
Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Modification via handle_oauth_callback() vulnerability
4.3
17 minutes ago
Save as PDF<= 4.6.1
Authenticated (Contributor+) Arbitrary Function Invocation / Code Injection via 'pdf_created_callback' Shortcode Attribute vulnerability
8.8
17 minutes ago
Tutor LMS<= 4.0.8
Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'student_id' Parameter vulnerability
5.3
18 minutes ago
Tutor LMS<= 4.0.8
Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'lesson_id' Parameter vulnerability
4.3
18 minutes ago
Divi Essentials<= 5.8.1
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
39 minutes ago
BP Better Messages<= 2.15.33
Unauthenticated Information Exposure Spoofing vulnerability
5.3
45 minutes ago
BP Better Messages<= 2.15.22
Reflected Cross-Site Scripting vulnerability
7.1
58 minutes ago
Dictionary<= 1.0
Reflected XSS vulnerability
7.1
59 minutes ago
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent< 4.4.4
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
Dewa Kirim<= 1.0.0
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
Dictionary<= 1.0
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
WP Travel Engine< 6.8.1
Subscriber+ Arbitrary Media File Move via user_profile_image vulnerability
6.5
1 hour ago
BP Better Messages<= 2.15.33
Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure vulnerability
6.5
1 hour ago
ShopLentor<= 3.5.1
Reflected Cross-Site Scripting vulnerability
7.1
1 hour ago
WooCommerce Checkout Manager7.4.9-7.9.6
Subscriber+ Arbitrary Attachment Deletion vulnerability
4.3
1 hour ago
Live Copy Paste for Elementor<= 1.5.6
Cross-Site Scripting vulnerability
5.8
1 hour ago
Pixel Gallery Addons for Elementor<= 2.1.14
Cross-Site Scripting vulnerability
5.8
1 hour ago
Smart Admin Assistant<= 2.2.0
Cross-Site Scripting vulnerability
5.8
1 hour ago