The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,196
Mitigations16,677
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP Data Access<= 5.5.68
Unauthenticated Insecure Direct Object Reference to Data Access vulnerability
5.3
16 minutes ago
Greenshift<= 12.8.9
Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI vulnerability
6.5
17 minutes ago
Reviews and Rating – Google My Business<= 5.10
WordPress Reviews and Rating - Google Reviews plugin <= 5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes vulnerability
6.5
18 minutes ago
WP Project Manager2.1.0-4.0.6
Unauthenticated Subscriber Account Creation vulnerability
5.3
26 minutes ago
RegistrationMagic< 6.0.9.4
Admin+ SQLi vulnerability
7.6
1 hour ago
WP Full Stripe Free< 8.5.1
Cross-Customer Subscription Modification vulnerability
4.3
1 hour ago
WP Full Stripe Free< 8.5.1
Unauthenticated Customer Portal Subscription and Billing Data Disclosure vulnerability
5.3
1 hour ago
WP Event SOlution< 4.1.19
Unauthenticated Order Completion Without Payment vulnerability
5.3
1 hour ago
Kirki< 6.0.14
Unauthenticated User and Comment Author Email Disclosure vulnerability
5.3
1 hour ago
WP Project Manager< 4.0.7
Subscriber+ Cross-Project Task Disclosure and Task Board Modification vulnerability
5.4
1 hour ago
WP Project Manager2.2.0-4.0.6
WordPress Project Manager plugin 2.2.0-4.0.7 - 4.0.6 - Subscriber+ User Activity Feed Disclosure vulnerability
4.3
1 hour ago
Royal Elementor Addons< 1.7.1066
Contributor+ Stored XSS vulnerability
6.5
1 hour ago
Booking Package< 1.7.25
Unauthenticated Price Manipulation vulnerability
5.3
1 hour ago
Royal Elementor Addons< 1.7.1066
Unauthenticated Like Count and IP Meta Modification vulnerability
5.3
1 hour ago
Amelia< 2.4.7
Unauthenticated Notification Queue Dispatch vulnerability
5.3
1 hour ago
Royal Elementor Addons< 1.7.1066
Unauthenticated Taxonomy Term Disclosure vulnerability
5.3
1 hour ago
WPCafe< 3.0.18
Unauthenticated Reservation Approval Bypass vulnerability
5.3
1 hour ago
WP Event SOlution< 4.1.22
Unauthenticated Unpublished Content Disclosure vulnerability
5.3
1 hour ago
Betheme<= 28.4
Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_box_2' Shortcode vulnerability
6.5
12 hours ago
Gutenverse<= 4.0.2
Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks vulnerability
6.5
12 hours ago