The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total36,119
Mitigations13,308
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
SiteLock Security<= 5.0.1
Broken Access Control vulnerability
4.3
17 minutes ago
Import into Easy Property Listings<= 2.2.1
Cross Site Request Forgery (CSRF) vulnerability
4.3
20 minutes ago
Yada Wiki<= 3.5
Cross Site Scripting (XSS) vulnerability
6.5
24 minutes ago
Featured Video for WordPress &#8211; VideographyWP<= 1.0.18
Cross Site Scripting (XSS) vulnerability
6.5
27 minutes ago
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent<= 4.0.3
Broken Access Control vulnerability
5.3
30 minutes ago
WBC907 Core<= 3.4.1
Cross Site Scripting (XSS) vulnerability
6.5
37 minutes ago
XStore Core< 5.6
Cross Site Scripting (XSS) vulnerability
6.5
40 minutes ago
Advance WP Query Search Filter<= 1.0.10
Reflected XSS via taxo_ajax vulnerability
7.1
8 hours ago
Advance WP Query Search Filter<= 1.0.10
Reflected XSS via counter vulnerability
7.1
8 hours ago
Strong Testimonials<= 3.2.18
Missing Authorization to Authenticated (Contributor+) Rating Meta Update vulnerability
4.3
10 hours ago
Lucky Wheel for WooCommerce – Spin a Sale<= 1.1.13
Authenticated (Administrator+) PHP Code Injection via Conditional Tags vulnerability
9.1
10 hours ago
Plugin Organizer< 10.2.4
Subscriber+ SQLi vulnerability
8.5
1 day ago
YaMaps for WordPress< 0.6.40
Contributor+ Stored XSS vulnerability
6.5
1 day ago
Advanced Ads<= 2.0.14
Authenticated (Editor+) Remote Code Execution via Shortcode vulnerability
9.1
1 day ago
PixelYourSite – Your smart PIXEL (TAG) Manager<= 11.1.5
Sensitive Information Exposure via Log File vulnerability
5.3
1 day ago
Popup box<= 6.0.7
Cross Site Request Forgery (CSRF) vulnerability
5.4
2 days ago
H5P<= 1.16.1
Broken Access Control vulnerability
5.3
2 days ago
Fana<= 1.1.35
Local File Inclusion vulnerability
7.5
2 days ago
Astra Widgets<= 1.2.16
Cross Site Scripting (XSS) vulnerability
5.9
2 days ago
Newsletters<= 4.12
Cross Site Scripting (XSS) vulnerability
6.5
2 days ago