The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total52,442
Mitigations17,123
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Divi Essentials<= 5.8.1
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
22 minutes ago
BP Better Messages<= 2.15.33
Unauthenticated Information Exposure Spoofing vulnerability
5.3
28 minutes ago
BP Better Messages<= 2.15.22
Reflected Cross-Site Scripting vulnerability
7.1
42 minutes ago
Dictionary<= 1.0
Reflected XSS vulnerability
7.1
42 minutes ago
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent< 4.4.4
Unauthenticated Stored XSS vulnerability
7.1
43 minutes ago
Dewa Kirim<= 1.0.0
Unauthenticated Stored XSS vulnerability
7.1
43 minutes ago
Dictionary<= 1.0
Unauthenticated Stored XSS vulnerability
7.1
44 minutes ago
WP Travel Engine< 6.8.1
Subscriber+ Arbitrary Media File Move via user_profile_image vulnerability
6.5
44 minutes ago
BP Better Messages<= 2.15.33
Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure vulnerability
6.5
44 minutes ago
ShopLentor<= 3.5.1
Reflected Cross-Site Scripting vulnerability
7.1
46 minutes ago
WooCommerce Checkout Manager7.4.9-7.9.6
Subscriber+ Arbitrary Attachment Deletion vulnerability
4.3
49 minutes ago
Live Copy Paste for Elementor<= 1.5.6
Cross-Site Scripting vulnerability
5.8
49 minutes ago
Pixel Gallery Addons for Elementor<= 2.1.14
Cross-Site Scripting vulnerability
5.8
49 minutes ago
Smart Admin Assistant<= 2.2.0
Cross-Site Scripting vulnerability
5.8
50 minutes ago
Ultimate Store Kit Elementor Addons<= 3.0.7
Cross-Site Scripting vulnerability
5.8
50 minutes ago
Prime Slider – Addons For Elementor<= 4.4.5
Cross-Site Scripting vulnerability
5.8
50 minutes ago
Element Pack Elementor Addons<= 8.7.14
Cross-Site Scripting vulnerability
5.8
51 minutes ago
Booking Calendar<= 11.8.2
Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter vulnerability
7.2
52 minutes ago
Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant2.0.5-5.1.0
Subscriber+ Arbitrary Form Submission Deletion vulnerability
4.3
53 minutes ago
Jeg Kit for Elementor<= 3.2.16
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
54 minutes ago