The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,045
Mitigations18,924
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Event Tickets<= 5.30.2
Broken Access Control vulnerability
4.3
4 minutes ago
Media Player Addons for Elementor – Media Player widget for WP<= 1.1.10
Cross Site Scripting (XSS) vulnerability
6.5
5 minutes ago
The Events Calendar<= 6.18.2
Broken Access Control vulnerability
5.4
6 minutes ago
Easy Digital Downloads<= 3.7.2
Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability
8.1
23 minutes ago
Essential Addons for Elementor<= 6.8.7
Unauthenticated Privilege Escalation to 'page_id' Parameter vulnerability
7.4
33 minutes ago
Fluent CRM<= 3.2.6
Broken Access Control vulnerability
5.4
1 hour ago
The Events Calendar<= 6.18.2
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
JetFormBuilder<= 3.6.7.1
Content Injection vulnerability
5.3
1 hour ago
Webba Booking<= 6.5.4
Broken Access Control vulnerability
5.4
1 hour ago
Redux Framework<= 4.5.15
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Email Customizer for WooCommerce (Pro)<= 3.9.5
Authenticated (Subscriber+) Remote Code Execution vulnerability
8.8
1 hour ago
The Events Calendar<= 6.18.2
Broken Access Control vulnerability
5.3
1 hour ago
JetFormBuilder<= 3.6.7.1
Broken Access Control vulnerability
5.3
1 hour ago
Modern Events Calendar Lite< 7.36.4
Subscriber+ Arbitrary Post Modification vulnerability
6.5
1 hour ago
Desktop Mode<= 1.1.16
Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure vulnerability
4.3
1 hour ago
@nx/gradle>= 21.0.0, < 22.7.9
npm: @nx/maven and @nx/gradle have OS command injection via nx.json plugin options
7.3
1 hour ago
@nx/maven>= 22.0.2, < 22.7.9
npm: @nx/maven and @nx/gradle have OS command injection via nx.json plugin options
7.3
1 hour ago
Timetics<= 1.0.65
Broken Access Control vulnerability
5.3
1 hour ago
The Events Calendar<= 6.18.2
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Blocksy Companion<= 2.1.60
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago