The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,337
Mitigations16,287
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Formidable Digital Signatures<= 3.0.6
Unauthenticated Arbitrary File Deletion via Signature Field vulnerability
8.6
2 hours ago
Passwordless Login by VentraConnect<= 1.4.3
WordPress Social Login, Passkeys, Magic Link & Email OTP - Passwordless Login by VentraConnect plugin <= 1.4.3 - Unauthenticated Authentication Bypass via Spotify OAuth Callback vulnerability
8.1
3 hours ago
Frontend Admin by DynamiApps<= 3.29.9
Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token vulnerability
8.8
21 hours ago
Ray Enterprise Translation<= 1.7.3
Subscriber+ Language Addition and Deletion vulnerability
5.4
21 hours ago
GeoDirectory<= 2.8.169
Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision vulnerability
8.1
21 hours ago
InstaWP Connect<= 0.1.3.6
Unauthenticated Cryptographic Key Disclosure vulnerability
5.9
21 hours ago
AcyMailing SMTP Newsletter<= 10.11.1
Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update vulnerability
8.8
21 hours ago
Tablesome<= 1.2.9
SQL Injection vulnerability
9.3
1 day ago
Ultimate Store Kit Elementor Addons<= 3.0.7
Cross-Site Scripting vulnerability
7.1
1 day ago
Element Pack Elementor Addons<= 8.7.14
Cross-Site Scripting vulnerability
7.1
1 day ago
Live Copy Paste for Elementor<= 1.5.4
Cross-Site Scripting vulnerability
7.1
1 day ago
Pixel Gallery Addons for Elementor<= 2.1.14
Cross-Site Scripting vulnerability
7.1
1 day ago
Ultimate Post Kit<= 4.2.0
Cross-Site Scripting vulnerability
7.1
1 day ago
Smart Admin Assistant<= 2.2.0
Cross-Site Scripting vulnerability
7.1
1 day ago
Prime Slider – Addons For Elementor<= 4.4.5
Cross-Site Scripting vulnerability
7.1
1 day ago
FormGent<= 1.9.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
Stream<= 4.2.0
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
1 day ago
WordPress< 7.0.3
Email Confirmation Bypass vulnerability
5.3
1 day ago
UsersWP<= 1.2.69
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 day ago
TrueBooker<= 1.2.3
Missing Authorization to Unauthenticated Arbitrary Password Reset vulnerability
9.8
1 day ago