The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total54,826
Mitigations18,197
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP Event Solution<= 4.1.26
Broken Access Control vulnerability
5.3
3 minutes ago
MapSVG<= 8.16.1
Cross Site Scripting (XSS) vulnerability
6.5
4 minutes ago
MapSVG<= 8.16.1
SQL Injection vulnerability
8.5
4 minutes ago
MapSVG<= 8.16.1
Sensitive Data Exposure vulnerability
5.3
5 minutes ago
Squeeze< 1.8.1
Subscriber+ Missing Authorization vulnerability
5.4
1 hour ago
MAIO &#8211; The new AI GEO / SEO tool< 7.3.22
Unauthenticated Crawl Analytics Disclosure vulnerability
5.3
1 hour ago
GoSMTP Pro<= 1.2.3
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Tourfic<= 3.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
GeoDirectory<= 2.8.191
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
ProfilePress<= 4.17.5
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
4 hours ago
SureCart<= 4.9.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Tutor LMS<= 4.1.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
User Registration & Membership Pro<= 6.2.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Vulnity Security<= 1.4.3
Unauthenticated Authentication Bypass to Administrator vulnerability
8.1
4 hours ago
WP Sessions Time Monitoring Full Automatic<= 1.1.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Events Made Easy<= 3.2.22
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
SureDash<= 1.12.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
Social Share Buttons<= 1.30
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
Mobile builder<= 1.4.2
Unauthenticated SQLi vulnerability
6.8
4 hours ago
DoubleScale CRM | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More<= 1.5.1
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
4 hours ago