The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,511
Mitigations19,133
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Image Hover Effects Ultimate<= 9.12.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 minutes ago
Church Admin<= 5.1.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 minutes ago
wpForo Forum<= 3.2.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
10 minutes ago
WP Data Access<= 5.5.89
Incorrect Authorization to Unauthenticated Privilege Escalation vulnerability
9.8
10 minutes ago
WS Form LITE<= 1.12.18
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
11 minutes ago
WPJAM Basic<= 7.1
Unauthenticated Privilege Escalation to 'data[args][role]' Parameter vulnerability
9.8
11 minutes ago
Real Testimonials<= 4.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 minutes ago
Advanced Form Integration<= 2.10.2
Unauthenticated PHP Object Injection vulnerability
9.8
13 minutes ago
TranslatePress<= 3.3.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 minutes ago
QA Analytics<= 5.3.0
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
9.8
14 minutes ago
WP Data Access<= 5.5.89
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
15 minutes ago
WP Data Access<= 5.5.89
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
15 minutes ago
Amelia9.0-9.9.1
Missing Authorization to Unauthenticated Arbitrary Event Attendee Data Exposure vulnerability
7.5
17 minutes ago
Naimur Email OTP Verification for WooCommerce<= 2.1.0
Unauthenticated Authentication Bypass to Account Takeover vulnerability
9.8
18 minutes ago
Ultimate Member<= 2.14.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
33 minutes ago
WP Visitor Statistics (Real Time Traffic)<= 8.7.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
33 minutes ago
Football Pool<= 2.13.5
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
34 minutes ago
wpForo Forum<= 3.2.1
Unauthenticated SQL Injection vulnerability
9.3
34 minutes ago
wpForo Forum<= 3.2.2
Authenticated (Subscriber+) Privilege Escalation to 'data[secondary_groupids]' CSV Parameter vulnerability
7.5
34 minutes ago
SEOPress<= 10.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
37 minutes ago