The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,584
Mitigations18,078
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
LatePoint<= 5.7.2
Unauthenticated Authentication Bypass to Customer Account Takeover vulnerability
7.4
8 minutes ago
PeproDev Branches Map<= 3.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
11 hours ago
Post Export Import with Media<= 1.17.1
Authenticated (Administrator+) PHP Object Injection vulnerability
7.2
11 hours ago
Mang Board WP<= 2.4.3
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.5
11 hours ago
LatePoint<= 5.7.3
Authenticated (Subscriber+) Sensitive Information Exposure in 'first_name' Parameter Template Re-expansion vulnerability
4.3
11 hours ago
Gallery Custom Links<= 2.3.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
4.9
11 hours ago
JTL-Connector for WooCommerce<= 2.4.3
Unauthenticated Arbitrary File Upload vulnerability
9.8
13 hours ago
FV Flowplayer Video Player<= 7.5.54.7212
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
Hyyan WooCommerce Polylang Integration<= 1.5.0
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
14 hours ago
Directorist<= 8.10.2.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
14 hours ago
PO/MO Editor<= 1.4.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
14 hours ago
Cryptocurrency Donation Box – Bitcoin & Crypto Donations<= 2.2.13
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
14 hours ago
Document Gallery<= 5.1.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
14 hours ago
Social Share Buttons & Analytics Plugin – GetSocial.io<= 4.5
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
14 hours ago
AGE-GATE<= 1.0
Unauthenticated Remote Code Execution vulnerability
9.8
14 hours ago
WP Event Solution<= 4.1.25
Broken Access Control vulnerability
5.3
14 hours ago
Download Monitor integration for WooCommerce<= 1.0.3
Broken Access Control vulnerability
4.3
14 hours ago
Premium Addons for Elementor<= 4.11.110
Broken Access Control vulnerability
5.3
14 hours ago
Widget Countdown3.0.0-3.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
15 hours ago
Fusion Builder<= 3.16.1
Unauthenticated Sensitive Information Exposure in 'args[link_target]' Parameter vulnerability
5.3
15 hours ago