The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,068
Mitigations17,002
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
bbPress<= 2.6.14
Sensitive Data Exposure vulnerability
5.3
24/09/2026
Kirki<= 6.2.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.16
Reflected Cross-Site Scripting vulnerability
7.1
1 hour ago
HUSKY<= 1.4.3
Cross Site Scripting (XSS) vulnerability
7.1
1 hour ago
HIPAA FORMS< 3.2.0
Unauthenticated Authorization Bypass vulnerability
6.5
3 hours ago
SSL Zen< 4.7.40
Subscriber+ TLS Private Key Disclosure vulnerability
7.5
3 hours ago
Site Reviews7.2.2-8.2.2
Unauthenticated PHP Object Injection vulnerability
9.8
3 hours ago
Developer Tools<= 1.1.3
Arbitrary File Upload vulnerability
10
3 hours ago
All In One SEO Pack< 5.0.0.1
Contributor+ Stored XSS via ai-assistant Block vulnerability
6.5
3 hours ago
WP Express Checkout (Accept PayPal Payments)< 2.4.9
Unauthenticated Payment Bypass via wpec_process_payment vulnerability
5.3
3 hours ago
RegistrationMagic< 6.0.9.9
Broken Access Control vulnerability
5.3
3 hours ago
Ultimate Gift Cards For WooCommerce< 3.2.10
Broken Access Control vulnerability
5.4
3 hours ago
Media LIbrary Assistant<= 3.35
Cross Site Scripting (XSS) vulnerability
5.9
3 hours ago
Themify – WooCommerce Product Filter<= 1.5.5
WordPress Themify - WooCommerce Product Filter plugin <= 1.5.5 - Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago
Classified Listing< 6.1.1
Arbitrary Content Deletion vulnerability
5.4
3 hours ago
Auto x LINE<= 1.0.0
Broken Access Control vulnerability
5.3
3 hours ago
Weaver Show Posts< 1.8.1
PHP Object Injection vulnerability
7.2
3 hours ago
Vigilant<= 2.10.2
Cross Site Scripting (XSS) vulnerability
7.1
4 hours ago
zipMoney(Zip Co) Payments Plugin for WooCommerce< 2.4.0
Unauthenticated Arbitrary Option Deletion vulnerability
9.1
4 hours ago
Simple Ajax Chat<= 20260811
Cross Site Scripting (XSS) vulnerability
7.1
4 hours ago