The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,204
Mitigations16,680
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Mang Board WP<= 2.3.7
Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie vulnerability
8.8
58 minutes ago
Noptin< 4.3.3
Unauthenticated Subscriber PII and confirm_key Disclosure vulnerability
5.3
1 hour ago
Tutor LMS< 4.0.6
Unauthenticated SQLi vulnerability
5.3
1 hour ago
Avada<= 7.16
Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability
9.8
1 hour ago
Fusion Builder<= 3.16
Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability
9.8
1 hour ago
WP Data Access<= 5.5.68
Unauthenticated Insecure Direct Object Reference to Data Access vulnerability
5.3
1 hour ago
Greenshift<= 12.8.9
Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI vulnerability
6.5
1 hour ago
Reviews and Rating – Google My Business<= 5.10
WordPress Reviews and Rating - Google Reviews plugin <= 5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes vulnerability
6.5
1 hour ago
WP Project Manager2.1.0-4.0.6
Unauthenticated Subscriber Account Creation vulnerability
5.3
1 hour ago
RegistrationMagic< 6.0.9.4
Admin+ SQLi vulnerability
7.6
3 hours ago
WP Full Stripe Free< 8.5.1
Cross-Customer Subscription Modification vulnerability
4.3
3 hours ago
WP Full Stripe Free< 8.5.1
Unauthenticated Customer Portal Subscription and Billing Data Disclosure vulnerability
5.3
3 hours ago
WP Event SOlution< 4.1.19
Unauthenticated Order Completion Without Payment vulnerability
5.3
3 hours ago
Kirki< 6.0.14
Unauthenticated User and Comment Author Email Disclosure vulnerability
5.3
3 hours ago
WP Project Manager< 4.0.7
Subscriber+ Cross-Project Task Disclosure and Task Board Modification vulnerability
5.4
3 hours ago
WP Project Manager2.2.0-4.0.6
WordPress Project Manager plugin 2.2.0-4.0.7 - 4.0.6 - Subscriber+ User Activity Feed Disclosure vulnerability
4.3
3 hours ago
Royal Elementor Addons< 1.7.1066
Contributor+ Stored XSS vulnerability
6.5
3 hours ago
Booking Package< 1.7.25
Unauthenticated Price Manipulation vulnerability
5.3
3 hours ago
Royal Elementor Addons< 1.7.1066
Unauthenticated Like Count and IP Meta Modification vulnerability
5.3
3 hours ago
Amelia< 2.4.7
Unauthenticated Notification Queue Dispatch vulnerability
5.3
3 hours ago