The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,661
Mitigations16,445
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
The School Management – Education & Learning Management<= 5.4
Authenticated (Custom+) SQL Injection via 'order[0][dir]' Parameter vulnerability
8.5
15 minutes ago
WPAdverts<= 2.3.2
Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
16 minutes ago
ShopMonitor.io< 1.2.0
Unauthenticated Administrator Account Takeover vulnerability
9.8
16 minutes ago
DynamicKit for Elementor< 1.0.3
Unauthenticated Account Takeover vulnerability
9.8
18 minutes ago
Profile Builder< 3.16.4
Unauthenticated Account Takeover vulnerability
9.8
19 minutes ago
Essential Addons for Elementor< 6.7.2
Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment vulnerability
8.1
21 minutes ago
ProSolution WP Client<= 2.0.8
Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters vulnerability
8.6
23 minutes ago
ProSolution WP Client<= 2.0.10
Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override vulnerability
10
24 minutes ago
SVG Support< 2.5.17
Author+ Stored XSS via .svgz Sanitization Bypass vulnerability
5.9
3 hours ago
WP Event SOlution< 4.1.20
Editor+ Local File Inclusion via speaker_template Setting vulnerability
7.2
3 hours ago
Nexter Blocks< 5.0.2
Author+ Stored XSS via SVG Upload vulnerability
5.9
3 hours ago
GeoDirectory< 2.8.110
Editor+ Stored XSS via Place Categories vulnerability
6.5
3 hours ago
ARForms Form Builder<= 1.8.5
WordPress Contact Form, Survey, Quiz & Popup Form Builder - ARForms plugin <= 1.8.5 - Unauthenticated PHP Object Injection vulnerability
9.8
4 hours ago
Kirki<= 6.1.1
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'context' Parameter vulnerability
4.3
5 hours ago
Kirki<= 6.1.1
Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'data' Parameter vulnerability
4.9
5 hours ago
Gallery <= 4.7.9
Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys vulnerability
8.5
5 hours ago
Bold Page Builder<= 5.6.8
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
5 hours ago
Forminator<= 1.55.0.2
Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'draft' Parameter vulnerability
5.3
5 hours ago
WP Compress<= 7.10.09
Cross-Site Request Forgery to Arbitrary Options Deletion vulnerability
4.3
5 hours ago
WC Vendors Marketplace<= 2.7.0
Authenticated (Shop Manager+) SQL Injection via 'status' Parameter vulnerability
7.6
5 hours ago