The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,351
Mitigations16,758
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Content Mask1.8.0-1.8.5.4
Contributor Publish Capability Bypass vulnerability
2.7
4 minutes ago
Brave< 0.8.6
Unauthenticated Reflected XSS vulnerability
7.1
4 minutes ago
Slider Hero< 9.1.3
Unauthenticated Stored XSS vulnerability
7.1
5 minutes ago
Tutor LMS< 4.0.6
Instructor+ Arbitrary File Read vulnerability
7.5
6 minutes ago
ProfilePress< 4.17.1
Unauthenticated Arbitrary Shortcode Execution via Display Name vulnerability
6.5
7 minutes ago
ProSolution WP Client< 2.0.11
Reflected XSS via 'page' Parameter vulnerability
7.1
9 minutes ago
ProSolution WP Client< 2.0.11
Reflected XSS via Multiple Parameters vulnerability
7.1
9 minutes ago
Dokan< 5.0.14
Shop Manager+ Arbitrary Plugin Installation/Activation via REST API vulnerability
7.2
10 minutes ago
NextScripts< 4.4.8
Reflected XSS via Facebook OAuth Callback vulnerability
7.1
13 minutes ago
Welcart e-Commerce< 2.12.1
Session Fixation via uscesid Parameter vulnerability
5.4
14 minutes ago
Animation Addons for Elementor< 2.7.2
Unauthenticated Server-Side Request Forgery vulnerability
7.2
14 minutes ago
WooMS<= 9.14
Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure vulnerability
7.2
16 minutes ago
JetEngine< 3.8.13.1
Unauthenticated Stored XSS via Form File Upload (SVG) vulnerability
7.1
20 minutes ago
LWS Optimize< 4.1.2
Unauthenticated Stored XSS via Real User Monitoring vulnerability
7.1
20 minutes ago
wpDiscuz< 7.6.60
Unauthenticated Stored XSS via Image URL Conversion vulnerability
7.1
24 minutes ago
Simple Membership< 4.7.8
Unauthenticated Stored XSS via PayPal Subscription Subscriber Name vulnerability
7.1
25 minutes ago
WP Maps< 4.9.7
Subscriber+ Local File Inclusion vulnerability
8.8
31 minutes ago
Advanced Google Maps< 6.1.3
Unauthenticated Local File Inclusion vulnerability
8.1
32 minutes ago
Content Views< 4.5
Subscriber+ SQL Injection via preview_request vulnerability
8.5
33 minutes ago
Library Management System< 3.6.7
Subscriber+ SQL Injection via Filter Value vulnerability
8.5
41 minutes ago