The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,469
Mitigations17,128
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP Magnific Popup<= 1.0
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
5.9
1 hour ago
Form Builder CP< 1.2.47
Editor+ Stored XSS via form_structure vulnerability
6.5
1 hour ago
KeepInMind Dashboard Notes< 0.8.4.2
WordPress KeepInMind - Dashboard Notes plugin < 0.8.4.2 - Contributor+ Stored XSS vulnerability
6.5
1 hour ago
Secure Copy Content Protection and Content Locking< 5.1.5
Admin+ Stored XSS via ays_sccp_sub_icon_image Parameter vulnerability
5.9
1 hour ago
Store Locator WordPress< 1.6.9
Admin+ Stored XSS via logo_name vulnerability
5.9
1 hour ago
Shariff<= 1.0.11
Admin+ Stored Cross-Site Scripting vulnerability
5.9
1 hour ago
Bricksforge< 3.1.8.8
Unauthenticated Arbitrary Password Reset via Pro Forms vulnerability
8.1
2 hours ago
WP Photo Album Plus<= 9.2.09.002
Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection vulnerability
7.5
2 hours ago
Gravity Forms<= 3.1.0.4
Unauthenticated Arbitrary File Upload via Hidden File Upload Field vulnerability
10
2 hours ago
Forminator<= 1.57.2
Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter vulnerability
9.1
2 hours ago
WP Recipe Maker<= 10.8.1
Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content vulnerability
9.1
2 hours ago
WP2Social Auto Publish<= 2.4.12
Authenticated (Administrator+) Stored Cross-Site Scripting via 'pages' Parameter vulnerability
5.9
2 hours ago
Hotel Booking Lite< 6.2.3
Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint vulnerability
5.3
2 hours ago
SEO Booster<= 7.4.7
Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Modification via handle_oauth_callback() vulnerability
4.3
2 hours ago
Save as PDF<= 4.6.1
Authenticated (Contributor+) Arbitrary Function Invocation / Code Injection via 'pdf_created_callback' Shortcode Attribute vulnerability
8.8
2 hours ago
Tutor LMS<= 4.0.8
Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'student_id' Parameter vulnerability
5.3
2 hours ago
Tutor LMS<= 4.0.8
Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'lesson_id' Parameter vulnerability
4.3
2 hours ago
Divi Essentials<= 5.8.1
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
3 hours ago
BP Better Messages<= 2.15.33
Unauthenticated Information Exposure Spoofing vulnerability
5.3
3 hours ago
BP Better Messages<= 2.15.22
Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago