The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,178
Mitigations18,968
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Debug Log Manager<= 2.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 minutes ago
Web 2.0 Directory plugin for WordPress<= 2.10.12
Unauthenticated SQL Injection vulnerability
9.3
5 minutes ago
FeedWordPress<= 2026.0517
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 minutes ago
GeoDirectory<= 2.8.197
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
12 minutes ago
SiteGround Security< 1.6.9
2FA Bypass vulnerability
7.5
13 minutes ago
WP Activity Log<= 5.6.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
14 minutes ago
FormFlow<= 3.10.2
Unauthenticated Arbitrary File Upload vulnerability
10
14 minutes ago
Mapster WP Maps< 2.0.6
Unauthenticated Arbitrary Post Modification vulnerability
7.5
15 minutes ago
BuddyForms2.8.8-2.10.0
Unauthenticated Guest Attachment Deletion vulnerability
3.7
15 minutes ago
Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress<= 1.1.9
Unauthenticated Arbitrary File Deletion vulnerability
8.6
16 minutes ago
Post Grid, Post Carousel, & List Category Posts – by Smart Post Show<= 4.0.9
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
16 minutes ago
Payable Payment Gateway for WooCommerce< 1.3.1
Unauthenticated Order Payment Forgery vulnerability
5.3
2 hours ago
Quick Event Manager8.4.6-9.18
Unauthenticated Private and Draft Content Disclosure vulnerability
5.3
2 hours ago
All-in-One Video Gallery< 5.0.0
Unauthenticated Private and Draft Video Disclosure vulnerability
5.3
2 hours ago
Firelight Lightbox< 2.3.24
Contributor+ Stored XSS vulnerability
6.5
2 hours ago
WPDM – Premium Packages< 7.2.2
Unauthenticated Order Total Manipulation vulnerability
5.3
2 hours ago
Bulk Media Register< 2.01
Author+ Arbitrary File Move vulnerability
7.7
2 hours ago
Payment Forms for Paystack< 4.0.6
Contributor+ Sensitive Information Disclosure vulnerability
6.5
2 hours ago
@hapi/joi>= 16.0.0, <= 17.1.1
npm: joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
7.5
9 hours ago
joi>= 17.1.1, < 17.13.9
npm: joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
7.5
9 hours ago