The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,275
Mitigations17,913
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP File Download<= 6.3.9
Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification vulnerability
8.1
59 minutes ago
PostX<= 5.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer<= 2.34.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Presto Player<= 4.5.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Rocket Lazy Load<= 2.4.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Stripe For WooCommerce<= 4.0.17
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
Simple Membership<= 4.8.4
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Noptin<= 4.3.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Podlove Podcast Publisher<= 4.5.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
WP Booking System<= 2.1.0.1
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
1 hour ago
PPOM for WooCommerce<= 34.0.10
Unauthenticated Arbitrary File Deletion vulnerability
9.1
1 hour ago
VikBooking Hotel Booking Engine & PMS<= 1.8.15
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
LatePoint<= 5.7.3
Authenticated (Custom+) Privilege Escalation to 'settings[default_wp_role_for_customer]' Parameter vulnerability
8.8
1 hour ago
GamiPress<= 7.9.4
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Groundhogg<= 4.8.3
Unauthenticated Privilege Escalation to Support User Identity Confusion vulnerability
8.1
1 hour ago
Groundhogg<= 4.9
Authenticated (Custom+) Privilege Escalation to 'user' Parameter vulnerability
8.8
1 hour ago
JetFormBuilder<= 3.6.6
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
FluentForm<= 6.2.5
Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification vulnerability
5.4
1 hour ago
Download Manager<= 3.3.57
Unauthenticated DOM-Based Reflected Cross-Site Scripting vulnerability
7.1
1 hour ago
Frontend Admin by DynamiApps<= 3.28.36
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago