The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total47,967
Mitigations15,511
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Speed Optimizer< 7.7.9
Unauthenticated Stored XSS via Minify Library vulnerability
7.1
4 hours ago
Clearfy Cache< 2.4.2
Unauthenticated Stored XSS via Minify Library vulnerability
7.1
4 hours ago
Autoptimize< 3.1.15
Unauthenticated Stored XSS via Minify Library vulnerability
7.1
4 hours ago
Email Encoder Bundle< 2.4.7
Unauthenticated Stored XSS vulnerability
7.1
4 hours ago
EventPress< 22.2
Reflected Cross-Site Scripting vulnerability
7.1
4 hours ago
WP Maps< 4.9.3
Subscriber+ Local File Inclusion vulnerability
8.8
4 hours ago
Ajax Load More< 7.8.4
Reflected XSS vulnerability
7.1
5 hours ago
Decent Comments< 3.0.2
Unauthenticated Email Address Disclosure vulnerability
5.3
5 hours ago
Restaurant Cafeteria<= 0.4.6
Subscriber+ Arbitrary Plugin Installation/Activation vulnerability
8.8
5 hours ago
Fortis for WooCommerce< 1.3.1
Sensitive API Key Disclosure vulnerability
7.5
5 hours ago
PowerPack for LearnDash< 1.3.0
Unauthenticated Arbitrary Option Update vulnerability
9.8
5 hours ago
Magic Export & Import< 1.2.0
Unauthenticated PII Disclosure vulnerability
7.5
5 hours ago
WP Photo Album Plus< 9.1.11.001
Unauthenticated SQL Injection via 'wppa-supersearch' Parameter vulnerability
9.3
5 hours ago
Login with Salesforce<= 1.0.2
Unauthenticated Authentication Bypass vulnerability
8.1
5 hours ago
WP eCommerce<= 3.15.1
Coupon Deletion via CSRF vulnerability
5.4
6 hours ago
Feeds for YouTube< 2.6.4
Subscriber+ License Data Deletion vulnerability
5.4
6 hours ago
Lazy Blocks< 4.3.0
Admin+ Stored XSS via Custom Block Frontend HTML vulnerability
5.9
6 hours ago
Schema & Structured Data for WP & AMP< 1.60
Unauthenticated Arbitrary Media Upload vulnerability
5.3
8 hours ago
Spam protection, AntiSpam, FireWall by CleanTalk< 6.79
Unauthenticated Stored XSS via Comment Shortcode Bypass vulnerability
7.1
9 hours ago
Open User Map PRO<= 1.4.31
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago