The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total53,328
Mitigations17,471
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
ThemeREX Addons<= 2.46.0
Server Side Request Forgery (SSRF) vulnerability
6.4
1 hour ago
ThemeREX Addons<= 2.46.0
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
OMGF | Host Google Fonts Locally< 6.3.11
Unauthenticated DoS vulnerability
5.9
1 hour ago
CMP – Coming Soon & Maintenance< 4.1.20
Unauthenticated Maintenance Mode Bypass vulnerability
5.3
1 hour ago
JetFormBuilder<= 3.6.5.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
LearnPress<= 4.4.9
Insecure Direct Object References (IDOR) vulnerability
5.3
4 hours ago
Advanced Ads<= 2.0.26
Sensitive Data Exposure vulnerability
4.3
4 hours ago
Download Manager<= 3.3.72
Sensitive Data Exposure vulnerability
5.3
4 hours ago
W3 Total Cache<= 2.10.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
CMB2<= 2.13.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
DoFollow Case by Case<= 3.6.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
BA Book Everything<= 1.8.28
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
Greenshift<= 13.2.0
Reflected Cross-Site Scripting vulnerability
7.1
6 hours ago
MW WP Form<= 5.1.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
GSpeech TTS<= 3.22.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
Customer Reviews for WooCommerce<= 5.122.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
Autoptimize<= 3.1.15.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
Visitor Traffic Real Time Statistics Pro<= 11.22
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
SiteOrigin Widgets Bundle<= 1.73.2
Authenticated (Contributor+) Local File Inclusion vulnerability
7.5
6 hours ago
JetAppointment<= 2.5.2.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago