The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,407
Mitigations19,054
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
iubenda< 3.13.7
Unauthenticated Stored XSS vulnerability
7.1
24 minutes ago
All-in-One Video Gallery< 5.1.0
Subscriber+ Stored XSS vulnerability
6.5
27 minutes ago
Surfer< 1.8.1.759
Contributor+ Privilege Escalation vulnerability
8.1
27 minutes ago
Ever Accounting< 2.3.3
Accounting Manager+ Arbitrary File Deletion vulnerability
8.7
27 minutes ago
Wurdey<= 1.0.0
Unauthenticated Administrator Authentication Bypass vulnerability
9.8
30 minutes ago
MCB<= 1.0.0
Unauthenticated Stored XSS vulnerability
7.1
31 minutes ago
AMP for WP<= 1.1.18
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
36 minutes ago
BuddyForms<= 2.10.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
37 minutes ago
Smart Cookie Kit<= 2.3.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
40 minutes ago
Live2DWebCanvas<= 2.2.1
Unauthenticated Arbitrary File Upload vulnerability
10
42 minutes ago
Advanced Members for ACF<= 1.3.0
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
46 minutes ago
Order Tracking< 3.6.0
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
47 minutes ago
MC4WP< 4.15.0
Unauthenticated Arbitrary Shortcode Execution vulnerability
4.8
47 minutes ago
All-in-One Video Gallery<= 5.0.0
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
47 minutes ago
BuddyForms<= 2.10.5
Unauthenticated Privilege Escalation to Form-Type Confusion vulnerability
9.8
48 minutes ago
ELEX WordPress HelpDesk & Customer Ticketing System<= 3.3.8
Unauthenticated Arbitrary File Deletion vulnerability
8.6
49 minutes ago
AAA Option Optimizer<= 1.7.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
54 minutes ago
WP Customer Area<= 8.4.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
55 minutes ago
Save Contact Form 7 data to Google Spreadsheet<= 1.8.0
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
7.5
56 minutes ago
WCFM Membership< 2.12.1
Subscriber+ Payment Verification Bypass vulnerability
4.3
56 minutes ago