The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,846
Mitigations17,267
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Automatic.css4.0.0
Unauthenticated Stored Cross-Site Scripting via REQUEST_URI vulnerability
7.1
4 hours ago
wpForo Forum3.0.0-3.1.5
Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass vulnerability
5.3
9 hours ago
Link Library< 7.9.6
Reflected XSS vulnerability
7.1
9 hours ago
Themify Builder<= 7.8.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
BP Better Messages<= 3.0.4
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
9 hours ago
Repeater Fields for Elementor Forms<= 2.2.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Fancy Product Designer<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Bookly<= 28.2
Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion vulnerability
6.5
9 hours ago
HT Contact Form 7<= 2.10.1
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
9 hours ago
Bookly<= 28.2
Unauthenticated Authorization Bypass vulnerability
5.3
9 hours ago
GeoDirectory<= 2.8.183
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
9 hours ago
WP Maps<= 4.9.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
9 hours ago
Fancy Product Designer<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Restaurant Menu by MotoPress<= 2.4.14
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Fancy Product Designer<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
AMP for WP<= 1.1.16
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
WPDM – Premium Packages<= 7.2.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
JetFormBuilder<= 3.6.5.3
Reflected Cross-Site Scripting vulnerability
7.1
9 hours ago
BA Book Everything<= 1.8.27
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Modula Image Gallery<= 3.0.2
Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) vulnerability
8.1
9 hours ago