The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,301
Mitigations17,930
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@tinacms/cli<= 2.7.0
NPM: Tina: Code injection via unescaped Git branch name in generated client source
8.2
1 hour ago
@tinacms/app<= 2.5.13
NPM: TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
9.3
1 hour ago
tinacms<= 3.13.0
NPM: TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
9.3
1 hour ago
@tinacms/web-components<= 0.2.0
NPM: @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS
7.6
1 hour ago
Divi Plus<= 2.4.0
Unauthenticated Arbitrary File Read vulnerability
7.5
2 hours ago
Avada<= 7.16.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
HivePress<= 1.7.31
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
SureDash<= 1.12.1
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
2 hours ago
WPO365<= 44.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.2
2 hours ago
Email Marketing for WordPress and WooCommerce – Retainful<= 1.0.10
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.4
2 hours ago
LatePoint<= 5.7.2
Unauthenticated SQL Injection vulnerability
7.5
2 hours ago
Funnel Builder by FunnelKit<= 3.16.0.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Molongui<= 5.2.12
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
2 hours ago
Motors<= 1.4.123
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Kirki<= 6.3.1
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
2 hours ago
WP Meteor Page Speed Optimization Topping<= 3.4.18
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
WPO365<= 44.1
Unauthenticated Authentication Bypass vulnerability
8.1
2 hours ago
WP Directory Kit<= 1.5.9
Authenticated (Subscriber+) SQL Injection vulnerability
6.5
3 hours ago
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels<= 5.0.2
Insecure Direct Object Reference to Unauthenticated Unauthorized Order Document Access vulnerability
7.5
3 hours ago
WPDM – Premium Packages<= 7.2.6
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago