The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,550
Mitigations17,141
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Ultimate Addons for Contact Form 73.2.4-3.5.50
Unauthenticated Arbitrary File Upload vulnerability
10
3 hours ago
Botiga Pro< 1.6.5
Unauthenticated Arbitrary Blog Options Update vulnerability
9.8
3 hours ago
Contextual Related Posts<= 4.4.1
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
Meta Box Frontend Submission<= 4.5.6
Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter vulnerability
9.8
4 hours ago
Meta Box AIO<= 3.11.0
Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter vulnerability
9.8
4 hours ago
Meta Box User Profile<= 3.11.0
Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter vulnerability
9.8
4 hours ago
Ultimate Post Kit<= 4.2.0
Cross-Site Scripting vulnerability
5.8
9 hours ago
APCu Manager< 4.5.0
Unauthenticated Stored XSS via Cache Key Pollution vulnerability
7.1
9 hours ago
User Submitted Posts< 20260608
Unauthenticated Stored XSS via Author Name vulnerability
7.1
10 hours ago
WP Support Plus Responsive Ticket System<= 9.1.2
Unauthenticated Stored XSS via File Upload vulnerability
7.1
10 hours ago
Ultimate Member< 2.12.0
Subscriber+ Stored XSS via Custom Textarea Profile Fields vulnerability
6.5
11 hours ago
Simple Membership< 4.7.5
Unauthenticated Stored XSS via Stripe Webhook API Version vulnerability
7.1
11 hours ago
Taskbuilder<= 5.0.7
Reflected Cross-Site Scripting vulnerability
7.1
12 hours ago
Asset CleanUp: Page Speed Booster<= 1.4.0.5
Unauthenticated Stored Cross-Site Scripting via Comment Content vulnerability
7.1
12 hours ago
Pochipp<= 1.20.2
Reflected Cross-Site Scripting via 'keyword' Parameter vulnerability
7.1
12 hours ago
Tutor LMS<= 4.0.8
Reflected Cross-Site Scripting via 'back_url' and 'search' Parameters vulnerability
7.1
12 hours ago
To Do List Member1.4-1.6
Unauthenticated Content Injection vulnerability
3.7
12 hours ago
RestroPress< 3.4.6
Unauthenticated Price Manipulation vulnerability
5.3
12 hours ago
Login With OTP<= 1.6
Unauthenticated Authentication Bypass vulnerability
9.8
12 hours ago
Sign-up Sheets< 2.4.0
Arbitrary Sign-up Deletion vulnerability
4.3
1 day ago