The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,569
Mitigations16,400
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Featured Video Plus<= 2.3.3
Cross Site Scripting (XSS) vulnerability
6.5
6 minutes ago
WPZOOM Forms – Contact Form Plugin for Gutenberg<= 2.0.4
Cross Site Scripting (XSS) vulnerability
6.5
7 minutes ago
Frontend Admin by DynamiApps<= 3.29.10
Cross Site Scripting (XSS) vulnerability
6.5
7 minutes ago
Login With Ajax<= 4.5.1
Cross Site Scripting (XSS) vulnerability
6.5
8 minutes ago
Video Conferencing with Zoom<= 4.6.8
Cross Site Scripting (XSS) vulnerability
6.5
10 minutes ago
Wufoo Shortcode<= 1.55
Cross Site Scripting (XSS) vulnerability
6.5
24 minutes ago
Typing Effect<= 1.3.7
Cross Site Scripting (XSS) vulnerability
6.5
25 minutes ago
WP Tab Widget<= 1.2.11
Cross Site Scripting (XSS) vulnerability
6.5
28 minutes ago
GeoDirectory<= 2.8.172
Cross Site Scripting (XSS) vulnerability
6.5
47 minutes ago
Podlove Podcast Publisher<= 4.5.3
Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter vulnerability
8.8
53 minutes ago
PPWP<= 1.9.20
Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update vulnerability
4.3
58 minutes ago
ProfilePress<= 4.16.19
Authenticated (Subscriber+) Arbitrary Shortcode Execution via First Name / Last Name Profile Field vulnerability
5.4
59 minutes ago
NEX-Forms<= 9.2.4
Authenticated (Admin+) SQL Injection via 'additional_params' Parameter vulnerability
7.6
1 hour ago
Bookly<= 27.7
WordPress Online Scheduling and Appointment Booking System - Bookly plugin <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameter vulnerability
4.3
1 hour ago
Loco Translate<= 2.8.7
Authenticated (Translator+) Stored Cross-Site Scripting via PO File Extracted Comments vulnerability
6.5
1 hour ago
Kubio AI Page Builder<= 2.8.5
Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action vulnerability
4.3
1 hour ago
Gravity Booster &#8211; Styles &amp; Layouts for Gravity Forms<= 5.26
Authenticated (Editor+) Stored Cross-Site Scripting via 'stylerSettings' Parameter vulnerability
6.5
1 hour ago
Fullscreen Galleria<= 1.6.12
Authenticated (Contributor+) SQL Injection via 'href' Attribute in Post Content vulnerability
8.5
1 hour ago
Frontend Admin by DynamiApps<= 3.29.9
Unauthenticated Privilege Escalation via 'item_id' Parameter vulnerability
8.8
1 hour ago
Everest Forms<= 3.5.2
WordPress Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin <= 3.5.2 - Missing Authorization to Authenticated (Delegated+) Arbitrary Plugin Activation via REST API and AJAX Endpoints vulnerability
4.3
1 hour ago