The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,800
Mitigations18,585
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Password Protected<= 2.8.4
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
38 minutes ago
Schema App Structured Data<= 2.3.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
38 minutes ago
WordPress<= 7.1.3
Unauthenticated Remote Code Execution via Core Update Race Condition
9
1 hour ago
WordPress<= 7.1.3
Subscriber+ Stored Cross-Site Scripting via Multisite Network Users Screens
5.4
1 hour ago
WordPress<= 7.1.3
Unauthenticated Sensitive Data Exposure of Unpublished Customizer Changesets
5.3
1 hour ago
WordPress<= 7.1.3
Custom Role Broken Access Control to Post Notes
3.8
1 hour ago
WordPress<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Customizer Selective Refresh
6.5
1 hour ago
WordPress<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Block Delimiter Whitespace
5.4
1 hour ago
WordPress<= 7.1.3
Editor+ Stored Cross-Site Scripting via Personal Data Erasure Requests Screen
6.5
1 hour ago
WordPress<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Interactivity API javascript: URLs
6.5
1 hour ago
WordPress<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Interactivity API Event Handler Bindings
7.4
1 hour ago
WordPress<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Interactivity API Context Prototype Pollution
7.4
1 hour ago
WordPress<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Interactivity API Bindings
7.4
1 hour ago
WordPress<= 7.1.3
Contributor+ Denial of Service via Interactivity API Bindings
5
1 hour ago
WordPress<= 7.1.3
Contributor+ Broken Access Control via Interactivity API Object Element Bindings
5
1 hour ago
WordPress<= 7.1.3
Author+ Stored Cross-Site Scripting via Interactivity Router Uploaded Files
6.5
1 hour ago
WordPress<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Script Module Data Shadowing
7.4
1 hour ago
WordPress<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Categories Block Format String
5.4
1 hour ago
WordPress<= 7.1.3
Author+ Stored Cross-Site Scripting via Image and Playlist Block Insertion
7.4
1 hour ago
DSGVO All in one for WP<= 5.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago