The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,319
Mitigations16,272
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Ultimate Store Kit Elementor Addons<= 3.0.7
Cross-Site Scripting vulnerability
7.1
56 minutes ago
Element Pack Elementor Addons<= 8.7.14
Cross-Site Scripting vulnerability
7.1
57 minutes ago
Live Copy Paste for Elementor<= 1.5.4
Cross-Site Scripting vulnerability
7.1
57 minutes ago
Pixel Gallery Addons for Elementor<= 2.1.14
Cross-Site Scripting vulnerability
7.1
57 minutes ago
Ultimate Post Kit<= 4.2.0
Cross-Site Scripting vulnerability
7.1
58 minutes ago
Smart Admin Assistant<= 2.2.0
Cross-Site Scripting vulnerability
7.1
58 minutes ago
Prime Slider – Addons For Elementor<= 4.4.5
Cross-Site Scripting vulnerability
7.1
59 minutes ago
FormGent<= 1.9.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Stream<= 4.2.0
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
1 hour ago
WordPress< 7.0.3
Email Confirmation Bypass vulnerability
5.3
1 hour ago
UsersWP<= 1.2.69
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
TrueBooker<= 1.2.3
Missing Authorization to Unauthenticated Arbitrary Password Reset vulnerability
9.8
1 hour ago
AIWU<= 1.5.6
Unauthenticated Privilege Escalation vulnerability
9.8
1 hour ago
TrueBooker<= 1.2.3
Missing Authorization to Unauthenticated Arbitrary Password Reset vulnerability
9.8
1 hour ago
Kirki<= 6.2.0
Freeform Page Builder, Website Builder & Customizer plugin <= 6.2.0 - Freeform Page Builder, Website Builder & Customizer <= 6.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
16 hours ago
WP Umbrella2.24.2-2.26.2
Cross Site Request Forgery (CSRF) vulnerability
5.4
22 hours ago
SiteGuard WP Plugin<= 1.8.6
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
crypto-js< 4.0.0
NPM: crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
9
3 days ago
hono>= 3.8.0, < 4.12.34
NPM: Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
4.8
3 days ago
hono>= 4.7.0, < 4.12.34
NPM: Hono: Proxy Helper does not remove response headers listed in the `Connection` header
3.7
3 days ago