The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total47,765
Mitigations15,404
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.8
SQL Injection vulnerability
8.5
04/06/2026
Sunshine Photo Cart<= 3.6.7
Broken Access Control vulnerability
6.3
02/06/2026
FPW Category Thumbnails<= 1.9.5
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
37 minutes ago
hiWeb Migration Simple<= 2.0.0.1
Reflected Cross-Site Scripting vulnerability
7.1
40 minutes ago
rognone<= 0.6.2
Reflected Cross-Site Scripting vulnerability
7.1
42 minutes ago
rognone<= 0.6.2
Reflected Cross-Site Scripting vulnerability
7.1
43 minutes ago
Simple Custom Login Page<= 1.0.3
Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
7.1
47 minutes ago
Spectra<= 2.19.25
Authenticated (Contributor+) Remote Code Execution vulnerability
8.8
48 minutes ago
GEO my WordPress<= 4.5.5
Unauthenticated SQL Injection vulnerability
9.3
1 hour ago
Simple History<= 5.26.0
Authenticated (Subscriber+) Account Takeover vulnerability
7.5
1 hour ago
SePay Gateway<= 1.1.20
Sensitive Data Exposure vulnerability
6.5
3 hours ago
Tiled Gallery Carousel Without JetPack<= 3.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
13 hours ago
Easy Cart<= 1.8
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
13 hours ago
ZeM STL<= 1.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
13 hours ago
BirdSeed<= 2.2.0
Cross-Site Request Forgery vulnerability
4.3
13 hours ago
Word Replacer<= 0.4
Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
5.9
13 hours ago
WP Nano AD<= 1.31
Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
5.9
13 hours ago
DeMomentSomTres Shortcodes<= 1.1.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
13 hours ago
Remove NoFollow Commenter URL<= 1.0
Cross-Site Request Forgery to Settings Update vulnerability
4.3
13 hours ago
Google Plus One Bottom<= 0.0.2
Cross-Site Request Forgery to Plugin Settings Update vulnerability
4.3
13 hours ago