The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,023
Mitigations18,848
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Enable Media Replace4.1.4-4.2.2
Unauthenticated PHP Object Injection vulnerability
7.5
4 hours ago
WP Visitor Statistics (Real Time Traffic)< 8.8
Unauthenticated Stored XSS vulnerability
7.1
4 hours ago
WP User Frontend< 4.3.14
Reflected XSS vulnerability
7.1
4 hours ago
Security & Malware scan by CleanTalk< 2.191
Unauthenticated Authentication Bypass vulnerability
8.1
4 hours ago
Firelight Lightbox< 2.3.23
Contributor+ Stored XSS vulnerability
6.5
7 hours ago
BuddyForms< 2.10.1
Subscriber+ Arbitrary Post Modification vulnerability
5.3
7 hours ago
BuddyForms< 2.10.3
Unauthenticated Form Configuration Disclosure vulnerability
5.3
7 hours ago
Fraud Prevention For Woocommerce< 2.3.6
Subscriber+ Arbitrary Customer Blacklisting vulnerability
5.4
7 hours ago
Joinchat6.3.2-6.4.1
Author+ Stored XSS vulnerability
6.5
7 hours ago
WP Visitor Statistics (Real Time Traffic)< 8.8
Admin+ SQLi vulnerability
7.6
7 hours ago
Gravity Forms<= 3.1.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
16 hours ago
Formidable Forms<= 6.35
Authenticated (Subscriber+) Arbitrary Plugin Installation vulnerability
8.8
16 hours ago
Gravity Forms<= 3.1.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
17 hours ago
Gravity Forms<= 3.1.2
Unauthenticated PHP Object Injection vulnerability
9.8
17 hours ago
Food Store – Online Food Delivery & Pickup<= 1.5.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
18 hours ago
AI Engine<= 3.8.6
Missing Authorization to Administrator Account Takeover vulnerability
7.5
18 hours ago
Forminator<= 1.55.0.2
Unauthenticated Limited File Deletion vulnerability
6.5
20 hours ago
Import Export WordPress Users<= 2.7.5
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
20 hours ago
Content Egg<= 12.0.0
Missing Authorization to Authenticated (Author+) Administrator-Authored Post Creation vulnerability
4.3
20 hours ago
Cool Formkit Lite<= 2.7.9
Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
20 hours ago