The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,312
Mitigations17,067
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg<= 1.5.2
Authenticated (Contributor+) Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute vulnerability
6.5
13 minutes ago
Asset CleanUp: Page Speed Booster<= 1.4.0.5
Cross Site Request Forgery (CSRF) vulnerability
7.1
2 hours ago
JetBlog<= 2.4.10
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
JetTabs<= 2.3.3.1
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
Element Pack Elementor Addons<= 8.8.3
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
King Addons for Elementor<= 51.1.81
Insecure Direct Object References (IDOR) vulnerability
5.3
2 hours ago
JetSearch<= 3.6.3
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
JetBlocks For Elementor<= 1.5.2
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
PropertyHive<= 2.2.6
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
JetElements For Elementor<= 2.9.2.1
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
Product Feed Manager<= 7.12.0
SQL Injection vulnerability
8.5
2 hours ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.19
Server Side Request Forgery (SSRF) vulnerability
6.4
2 hours ago
PublishPress Series<= 3.1.3
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
WP Maps<= 4.9.9
SQL Injection vulnerability
7.6
2 hours ago
Newsletters<= 4.18
SQL Injection vulnerability
7.6
2 hours ago
WPMasterToolKit<= 2.22.0
SQL Injection vulnerability
7.6
3 hours ago
Brizy<= 2.8.14
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
FluentAuth – The Ultimate Authorization & Security Plugin for WordPress<= 2.1.2
Email Verification Bypass vulnerability
5.3
3 hours ago
LatePoint<= 5.6.9
Unauthenticated Insecure Direct Object Reference to Sensitive Information Disclosure vulnerability
4.3
3 hours ago
WC Vendors Marketplace<= 2.7.2.1
SQL Injection vulnerability
7.6
3 hours ago