The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,047
Mitigations18,924
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
APIExperts Square for WooCommerce<= 4.7.5
Cross Site Request Forgery (CSRF) vulnerability
5.4
1 hour ago
AI Engine<= 3.8.8
Cross Site Request Forgery (CSRF) vulnerability
8.8
1 hour ago
Event Tickets<= 5.30.2
Broken Access Control vulnerability
4.3
1 hour ago
Media Player Addons for Elementor – Media Player widget for WP<= 1.1.10
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
The Events Calendar<= 6.18.2
Broken Access Control vulnerability
5.4
1 hour ago
Easy Digital Downloads<= 3.7.2
Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability
8.1
2 hours ago
Essential Addons for Elementor<= 6.8.7
Unauthenticated Privilege Escalation to 'page_id' Parameter vulnerability
7.4
2 hours ago
Fluent CRM<= 3.2.6
Broken Access Control vulnerability
5.4
2 hours ago
The Events Calendar<= 6.18.2
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
JetFormBuilder<= 3.6.7.1
Content Injection vulnerability
5.3
2 hours ago
Webba Booking<= 6.5.4
Broken Access Control vulnerability
5.4
2 hours ago
Redux Framework<= 4.5.15
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Email Customizer for WooCommerce (Pro)<= 3.9.5
Authenticated (Subscriber+) Remote Code Execution vulnerability
8.8
3 hours ago
The Events Calendar<= 6.18.2
Broken Access Control vulnerability
5.3
3 hours ago
JetFormBuilder<= 3.6.7.1
Broken Access Control vulnerability
5.3
3 hours ago
Modern Events Calendar Lite< 7.36.4
Subscriber+ Arbitrary Post Modification vulnerability
6.5
3 hours ago
Desktop Mode<= 1.1.16
Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure vulnerability
4.3
3 hours ago
@nx/gradle>= 21.0.0, < 22.7.9
npm: @nx/maven and @nx/gradle have OS command injection via nx.json plugin options
7.3
3 hours ago
@nx/maven>= 22.0.2, < 22.7.9
npm: @nx/maven and @nx/gradle have OS command injection via nx.json plugin options
7.3
3 hours ago
Timetics<= 1.0.65
Broken Access Control vulnerability
5.3
3 hours ago