The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,496
Mitigations16,839
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Element Pack Elementor Addons<= 8.7.14
Cross-Site Scripting vulnerability
6.5
3 minutes ago
Live Copy Paste for Elementor<= 1.5.6
Cross-Site Scripting vulnerability
6.5
3 minutes ago
Pixel Gallery Addons for Elementor<= 2.1.14
Cross-Site Scripting vulnerability
6.5
4 minutes ago
Ultimate Post Kit<= 4.2.0
Cross-Site Scripting vulnerability
6.5
4 minutes ago
Smart Admin Assistant<= 2.2.0
Cross-Site Scripting vulnerability
6.5
4 minutes ago
Prime Slider – Addons For Elementor<= 4.4.5
Cross-Site Scripting vulnerability
6.5
4 minutes ago
FluentCart<= 1.6.2
Authenticated (Custom+) Arbitrary File Deletion vulnerability
7.7
26 minutes ago
WP Project Manager Pro<= 4.0.1
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
47 minutes ago
Måne<= 1.7
Unauthenticated Local File Inclusion vulnerability
8.1
59 minutes ago
WordPress Persistent Login<= 3.1.0
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
1 hour ago
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent<= 4.4.1
Unauthenticated Arbitrary File Upload vulnerability
10
1 hour ago
TranslatePress<= 3.3.1
Unauthenticated Account Takeover vulnerability
9.8
1 hour ago
Formidable Charts<= 2.0.1
Unauthenticated Arbitrary File Read via 'frm_graph' Parameter vulnerability
7.5
1 hour ago
sanitize-html>= 1.9.0, <= 2.17.6
NPM: ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass
5.4
9 hours ago
nanoid< 3.3.12
NPM: nanoid: Integer Overflow or Wraparound
7.4
11 hours ago
pnpm>= 10.7.0, < 10.34.5
NPM: pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml
7.4
11 hours ago
Easy Waveform Player<= 1.2.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
12 hours ago
pnpm>= 12.0.0-alpha.0, < 12.0.0-alpha.5
NPM: pnpm: pacquet trust-lockfile install can create dependency symlinks outside the project
7.1
12 hours ago
@appium/base-driver<= 10.6.0
NPM: Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes
6.5
12 hours ago
Divi<= 4.27.5
Authenticated (Contributor+) Stored Cross-Site Scripting via Contact Form 'redirect_url' Shortcode Parameter vulnerability
6.5
13 hours ago