The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,397
Mitigations19,045
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Advanced Members for ACF<= 1.3.0
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
6 minutes ago
All-in-One Video Gallery<= 5.0.0
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
6 minutes ago
BuddyForms<= 2.10.5
Unauthenticated Privilege Escalation to Form-Type Confusion vulnerability
9.8
8 minutes ago
ELEX WordPress HelpDesk & Customer Ticketing System<= 3.3.8
Unauthenticated Arbitrary File Deletion vulnerability
8.6
8 minutes ago
AAA Option Optimizer<= 1.7.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
13 minutes ago
WP Customer Area<= 8.4.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
15 minutes ago
Save Contact Form 7 data to Google Spreadsheet<= 1.8.0
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
7.5
15 minutes ago
WCFM Membership< 2.12.1
Subscriber+ Payment Verification Bypass vulnerability
4.3
16 minutes ago
Mail Mage<= 0.0.25
Unauthenticated SQLi vulnerability
9.3
16 minutes ago
GS JWT Authentication for WP REST API<= 1.0.0
Unauthenticated Privilege Escalation vulnerability
9.3
17 minutes ago
Cool Media Filter<= 1.0.1
Subscriber+ Privilege Escalation vulnerability
8.8
22 minutes ago
Static Snapshot<= 0.2.1
Unauthenticated RCE vulnerability
10
25 minutes ago
WHIZZ<= 1.1.8
Unauthenticated Arbitrary User Password Reset vulnerability
9.8
34 minutes ago
Placester<= 1.4.3
Unauthenticated Account Takeover vulnerability
9.8
36 minutes ago
Feedzy<= 5.2.13
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
37 minutes ago
MDTF<= 1.4.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
37 minutes ago
CTX Feed<= 8.0.26
Authenticated (Shop Manager+) PHP Code Injection vulnerability
7.2
44 minutes ago
WP User Manager<= 2.10.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
52 minutes ago
Graphina – Charts and Graphs For Elementor<= 3.1.13
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
PublishPress Revisions3.9.0-4.3.0
Subscriber+ Unpublished Content Disclosure vulnerability
4.3
1 hour ago