The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total53,390
Mitigations17,492
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Rich Showcase for Google Reviews<= 7.1.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
5 minutes ago
trigger.dev< 4.5.2
NPM: Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL
7.7
22 minutes ago
trigger.dev< 4.5.2
NPM: Trigger.dev: Run replay injects a task run into an attacker-chosen environment (cross-tenant write)
7.1
22 minutes ago
WPCafe<= 3.0.18
Authenticated (Contributor+) Local File Inclusion vulnerability
7.5
27 minutes ago
Simple Membership<= 4.8.3
Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure vulnerability
7.5
30 minutes ago
Smart Manager<= 8.97.0
Authenticated (Subscriber+) SQL Injection to Privilege Escalation vulnerability
8.5
31 minutes ago
Groundhogg<= 4.9
Authenticated (Sales Person+) Privilege Escalation vulnerability
8.8
32 minutes ago
VikAppointments Services Booking Calendar<= 1.2.21
Unauthenticated Arbitrary File Deletion vulnerability
9.1
33 minutes ago
Wallstreet<= 2.8.6
Cross Site Request Forgery (CSRF) vulnerability
8.8
37 minutes ago
WP Visitor Statistics (Real Time Traffic)<= 8.7
Unauthenticated SQL Injection vulnerability
6.8
39 minutes ago
WPC Estimated Delivery Date for WooCommerce<= 4.0.1
Reflected Cross-Site Scripting vulnerability
7.1
1 hour ago
Wp Ultimate Review<= 2.4.3
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
1 hour ago
Twenty20 Image Before-After<= 2.0.5
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Nelio Content<= 4.5.0
Missing Authorization to Authenticated (Contributor+) Arbitrary Reusable Message Deletion vulnerability
5.4
1 hour ago
WPCafe<= 3.0.19
Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete vulnerability
5.3
2 hours ago
Responsive Plus<= 3.5.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
SEOPress<= 10.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
4.9
2 hours ago
Ultra Addons Lite for Elementor<= 1.3.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Helpdesk Support Ticket System for WooCommerce<= 2.1.6
Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion vulnerability
4.3
2 hours ago
Social Icons Widget & Block by WPZOOM<= 4.7.3
Unauthenticated Sensitive Information Disclosure vulnerability
5.3
2 hours ago