The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,233
Mitigations16,203
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP Event SOlution< 4.1.16
Unauthenticated Payment Bypass vulnerability
5.3
2 minutes ago
WP Travel< 11.8.1
Unauthenticated Payment Bypass vulnerability
5.3
2 minutes ago
Hide My WP Ghost< 7.0.05
IP Address Spoofing vulnerability
5.4
2 minutes ago
Booking Calendar Contact Form<= 1.0.23
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 minutes ago
Ultimate Product Catalogue<= 3.8.6
Authenticated (Contributor+) Arbitrary File Upload vulnerability
10
4 minutes ago
Booking Calendar Contact Form<= 1.1.24
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 minutes ago
Zoner - Real Estate< 4.2
WordPress Zoner - Real Estate WordPress Theme theme < 4.2 - Real Estate WordPress Theme < 4.2 - Cross-Site Scripting vulnerability
7.1
21 minutes ago
Contact Form Builder, Contact Widget<= 1.6.1
Reflected Cross-Site Scripting vulnerability
7.1
23 minutes ago
Flights &amp; Hotels Booking WP Plugin<= 2.3
Reflected Cross-Site Scripting vulnerability
7.1
24 minutes ago
WOLF< 1.1.0
WordPress WOLF plugin < 1.1.0 - WordPress Posts Bulk Editor and Manager < 1.1.0 - Stored XSS vulnerability
7.1
25 minutes ago
International Sms For Contact Form 7 Integration<= 1.2
Reflected Cross-Site Scripting vulnerability
7.1
34 minutes ago
FluentForm<= 6.2.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
36 minutes ago
Easy Digital Downloads<= 3.6.9
Authenticated (Shop Manager+) Arbitrary File Upload vulnerability
9.1
48 minutes ago
Wholesale For WooCommerce Lite – B2B & B2C Solution<= 2.0.5
Authenticated (Author+) Privilege Escalation vulnerability
7.2
57 minutes ago
Database for CF7<= 1.2.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Google Tag Manager<= 1.22.3
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Academy LMS<= 3.8.2
Subscriber+ Sensitive Information Disclosure vulnerability
6.5
3 hours ago
ElementsKit Elementor addons Lite< 3.10.01
Subsite Administrator+ PHP Code Injection vulnerability
7.2
3 hours ago
JS Help Desk< 3.1.4
Unauthenticated Arbitrary Ticket File Attachment Upload vulnerability
5.3
3 hours ago
JS Help Desk< 3.1.4
Subscriber+ Sensitive Information Disclosure vulnerability
6.5
3 hours ago