The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total47,894
Mitigations15,481
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Email Encoder Premium< 0.3.12
Unauthenticated Stored XSS vulnerability
7.1
13 hours ago
Email Address Encoder< 1.0.25
Unauthenticated Stored XSS vulnerability
7.1
13 hours ago
LearnPress<= 4.3.6
Unauthenticated Sensitive Information Exposure vulnerability
5.3
3 days ago
Quick Playground<= 1.3.4
Authenticated (Administrator+) Arbitrary File Read vulnerability
4.4
3 days ago
Mobile DJ Manager<= 1.7.8.3
Authenticated (Administrator+) Arbitrary File Upload vulnerability
9.1
3 days ago
LearnPress Export Import<= 4.1.4
Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability
4.9
3 days ago
EmbedPress<= 4.5.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 days ago
Drag and Drop Multiple File Upload – Contact Form 7<= 1.3.9.7
Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
5.9
3 days ago
Contact Form by WPForms<= 1.10.0.4
Unauthenticated Insufficient Verification of Data Authenticity vulnerability
5.3
3 days ago
OptinCraft – Drag & Drop Optins & Popup Builder for WordPress<= 1.2.0
Authenticated (Administrator+) SQL Injection vulnerability
7.6
3 days ago
Click to Chat<= 4.39
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 days ago
LearnPress Export Import<= 4.1.4
Authenticated (Administrator+) PHP Object Injection vulnerability
6.6
3 days ago
Page-list<= 6.2
Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure vulnerability
4.3
3 days ago
Master Addons for Elementor<= 3.1.0
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
5.9
3 days ago
LatePoint<= 5.6.0
Cross-Site Request Forgery vulnerability
4.3
3 days ago
Simple SEO Slideshow<= 1.2.8
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 days ago
Feedzy<= 5.1.7
Missing Authorization to Authenticated (Contributor+) Import Job Creation, Execution, Purge, Log Clearing, and Information Disclosure vulnerability
4.3
3 days ago
Quiz And Survey Master<= 11.1.2
Authenticated (Admin+) SQL Injection vulnerability
7.6
3 days ago
WPvivid Backup and Migration<= 0.9.128
Authenticated (Admin+) Arbitrary Directory Deletion vulnerability
3.8
3 days ago
Shared Files<= 1.7.64
Path Traversal vulnerability
7.5
3 days ago