The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,841
Mitigations19,222
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Ninja Forms File Uploads Extension<= 3.3.36
WordPress Ninja Forms - File Uploads plugin <= 3.3.36 - Unauthenticated Arbitrary File Deletion vulnerability
8.6
3 hours ago
6Storage Rentals<= 2.31.0
Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover vulnerability
8.8
3 hours ago
Author Image<= 4.9.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
Reset Database<= 1.1.3
Authenticated (Subscriber+) Privilege Escalation to Missing Capability and Nonce Check in process_reset() vulnerability
8.8
3 hours ago
AutomatorWP< 6.0.8
Zoom/AWeber Integration Connection Hijack vulnerability
4.3
4 hours ago
Page Builder: Live Composer< 2.1.24
Contributor+ Stored XSS vulnerability
6.5
4 hours ago
NotificationX< 3.3.7
Unauthenticated Settings Update and Email Sending vulnerability
5.3
4 hours ago
Schema & Structured Data for WP & AMP< 1.70
Contributor+ Stored XSS vulnerability
6.5
4 hours ago
Schema & Structured Data for WP & AMP< 1.70
Unauthenticated Non-Public Comment Disclosure vulnerability
5.3
4 hours ago
Schema & Structured Data for WP & AMP< 1.70
Contributor+ Structured Data Modification of Other Users' Posts vulnerability
3.1
4 hours ago
Schema & Structured Data for WP & AMP< 1.70
Authenticated Arbitrary Post Modification vulnerability
5.3
4 hours ago
Limit Login Attempts Reloaded< 3.4.2
Admin+ SSRF vulnerability
4.1
4 hours ago
WP Directory Kit< 1.6.3
Listing Admin+ SQL Injection vulnerability
7.6
4 hours ago
WP Directory Kit< 1.6.3
Unauthenticated User Data and Contact Message Disclosure vulnerability
5.3
4 hours ago
Smush Image Compression and Optimization< 4.3.6
Author+ Optimization and Restoration of Others' Attachments vulnerability
4.3
4 hours ago
AnyWhere Elementor< 1.3.1
Contributor+ Arbitrary Post Content Disclosure vulnerability
4.3
4 hours ago
AnyWhere Elementor< 1.3.1
Author+ Stored XSS vulnerability
6.5
4 hours ago
AnyWhere Elementor< 1.3.1
Author+ Stored XSS vulnerability
6.5
4 hours ago
Forminator< 1.58.4
Unauthenticated Disclosure of Post-Payment Redirect URL and Thank-You Message vulnerability
5.3
4 hours ago
Download Manager4.0.0-7.6.1
Unauthenticated Missing Authorization vulnerability
3.7
4 hours ago