The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,251
Mitigations17,894
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Easy Digital Downloads<= 3.6.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 minutes ago
FooSales<= 1.43.0
Authenticated (Custom+) Privilege Escalation vulnerability
8.8
3 minutes ago
GeoDirectory<= 2.8.187
Unauthenticated Local File Inclusion vulnerability
8.1
4 minutes ago
HivePress<= 1.7.31
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 minutes ago
FV Player 8<= 8.1.7
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
5 minutes ago
Spam protection, AntiSpam, FireWall by CleanTalk<= 6.88
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
18 minutes ago
LifterLMS<= 10.2.1
Authenticated (Custom+) PHP Object Injection vulnerability
8.8
31 minutes ago
Gutenberg Blocks by Kadence Blocks<= 3.7.12
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
6.5
36 minutes ago
Fusion Builder<= 3.16.1
Unauthenticated Arbitrary WordPress Action Invocation vulnerability
9.1
38 minutes ago
GPT3 AI Content Writer<= 2.4.89
Missing Authorization to Authenticated (Subscriber+) Semantic Search Settings Modification vulnerability
3.1
40 minutes ago
GPT3 AI Content Writer<= 2.4.89
Missing Authorization to Authenticated (Subscriber+) Global Plugin Settings Modification vulnerability
3.1
40 minutes ago
GiveWP<= 4.17.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.4
43 minutes ago
Advanced IP Blocker<= 8.13.13
Unauthenticated Authentication Bypass vulnerability
9.8
43 minutes ago
Blocksy Companion<= 2.1.58
Unauthenticated Privilege Escalation to 'role' Parameter vulnerability
9.1
45 minutes ago
FluentForm<= 6.2.14
Reflected Cross-Site Scripting vulnerability
7.1
45 minutes ago
Getwid<= 3.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
7.1
47 minutes ago
Table Field Add-on for ACF and SCF<= 1.3.35
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
48 minutes ago
Embed Any Document<= 2.7.13
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
49 minutes ago
Booking Calendar<= 11.4.3
Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action vulnerability
5.3
49 minutes ago
Form Maker by 10Web<= 1.15.48
Reflected Cross-Site Scripting vulnerability
7.1
50 minutes ago