The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,767
Mitigations16,887
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Otter - Gutenberg Block<= 3.1.7
Missing Authorization to Unauthenticated Purchase Verification Bypass vulnerability
5.3
35 minutes ago
Masteriyo - LMS<= 2.2.0
Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion vulnerability
5.3
35 minutes ago
Powerkit<= 3.0.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing vulnerability
6.5
36 minutes ago
Flamingo<= 2.6.2
Authenticated (Contributor+) Missing Authorization to Unauthorized Tag Information Disclosure via wp.getTerms and ajax-tag-search vulnerability
4.3
36 minutes ago
SEO Flow by LupsOnline3.0.0-3.0.2
Unauthenticated Privilege Escalation vulnerability
9.8
48 minutes ago
Jetpack16.1-16.1.2
WordPress Jetpack plugin 3.2 - 16.1.2 - Missing Authorization on WPCOM Media API Attachment Parent vulnerability
4.3
1 day ago
Jetpack16.1-16.1.2
Authenticated (Administrator+) PHP Object Injection vulnerability
7.2
1 day ago
Ninja Forms - Save Progress<= 3.0.30
WordPress Ninja Forms - Save Progress plugin <= 3.0.30 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Data Deletion via admin-ajax.php with admin_init Hook vulnerability
4.3
1 day ago
LearnDash LMS4.25.0-5.1.6
WordPress LearnDash LMS plugin 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint vulnerability
5.4
1 day ago
FooGallery<= 3.3.2
Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute vulnerability
6.5
1 day ago
Pods<= 3.3.9.1
Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute vulnerability
6.5
1 day ago
Custom Contact Forms<= 7.16
Missing Authorization to Authenticated (Contributor+) Arbitrary Post Deletion and Post Meta Modification via Nested 'fields[].ID' / 'choices[].ID' Parameters vulnerability
4.3
1 day ago
YT Player< 2.1.0
Contributor+ SQLi vulnerability
7.6
2 days ago
EmbedPress4.6.0-4.6.3
Unauthenticated Google Reviews API Quota Consumption and Database Bloat vulnerability
5.3
2 days ago
VikWidgetsLoader< 1.12.0
Contributor+ Stored XSS vulnerability
6.5
2 days ago
CatFolders Document Gallery & PDF Library< 2.0.7
Author+ Stored XSS vulnerability
5.9
2 days ago
Joli Table Of Contents< 3.0.3
Author+ Stored XSS vulnerability
5.9
2 days ago
EmbedPress4.6.0-4.6.3
Contributor+ Google Reviews Modification vulnerability
2.7
2 days ago
WP Event SOlution< 4.1.22
Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation vulnerability
4.9
2 days ago
EmbedPress4.6.0-4.6.3
Contributor+ Administrator Email Disclosure vulnerability
2.7
2 days ago