The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,218
Mitigations18,998
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
News Kit Elementor Addons<= 1.4.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
6 minutes ago
BuddyPress XProfile Custom Image Field<= 3.1.0
Unauthenticated Arbitrary File Deletion vulnerability
8.6
11 minutes ago
Advanced Custom Fields: Extended PRO<= 0.9.2.6
Unauthenticated Remote Code Execution vulnerability
10
17 minutes ago
Easy Digital Downloads<= 3.7.2
Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability
8.1
33 minutes ago
FluentCart<= 1.6.2
Authenticated (Custom+) Arbitrary File Deletion vulnerability
8.1
36 minutes ago
Photo Engine<= 6.5.7
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
37 minutes ago
AI Alt Text Generator<= 2.7.0
Missing Authorization to Unauthenticated Arbitrary Attachment Modification vulnerability
5.3
2 hours ago
WooCommerce Multilingual & Multicurrency<= 5.5.7
Authenticated (Shop Manager+) SQL Injection vulnerability
4.9
2 hours ago
JetFormBuilder<= 3.6.2
Missing Authorization to Unauthenticated JetEngine Options Page Modification vulnerability
5.3
2 hours ago
SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress<= 0.9.9
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
@bytebase/dbhub< 0.22.6
npm: DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
6.1
13 hours ago
@sd-jwt/core<= 0.19.0
npm: SD JWT JS: Tampered disclosures silently dropped instead of rejected
7.1
13 hours ago
@sd-jwt/decode<= 0.19.0
npm: SD JWT JS: Tampered disclosures silently dropped instead of rejected
7.1
13 hours ago
s2Member<= 260927
Unauthenticated Remote Code Execution vulnerability
10
19 hours ago
Ultimate Addons for Contact Form 7<= 3.5.54
Unauthenticated PHP Object Injection to Arbitrary File Deletion vulnerability
8.6
20 hours ago
PayHere Payment Gateway Plugin for WooCommerce2.4.0-2.4.5
Unauthenticated Payment Bypass vulnerability
5.3
22 hours ago
Ak Framework<= 2.9.8
Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Update vulnerability
8.8
1 day ago
MapPress Maps for WordPress< 2.97.15
Unauthenticated Email Address Disclosure vulnerability
5.3
2 days ago
Media LIbrary Assistant< 3.44
Contributor+ Stored XSS vulnerability
6.5
2 days ago
Media LIbrary Assistant< 3.44
Subscriber+ Missing Authorization vulnerability
4.3
2 days ago