The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,227
Mitigations17,890
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Fusion Builder<= 3.16.1
Unauthenticated Arbitrary WordPress Action Invocation vulnerability
9.1
16 minutes ago
Advanced IP Blocker<= 8.13.13
Unauthenticated Authentication Bypass vulnerability
9.8
21 minutes ago
Blocksy Companion<= 2.1.58
Unauthenticated Privilege Escalation to 'role' Parameter vulnerability
9.1
23 minutes ago
FluentForm<= 6.2.14
Reflected Cross-Site Scripting vulnerability
7.1
24 minutes ago
Form Maker by 10Web<= 1.15.48
Reflected Cross-Site Scripting vulnerability
7.1
28 minutes ago
Extensions For CF7<= 3.4.5
Unauthenticated Arbitrary File Upload vulnerability
9.8
29 minutes ago
Filter Everything&nbsp;— WordPress &amp; WooCommerce Filters<= 1.9.6
Reflected Cross-Site Scripting vulnerability
7.1
30 minutes ago
Bookly<= 28.4
Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation vulnerability
6.8
31 minutes ago
Data Tables Generator by Supsystic<= 1.15.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
31 minutes ago
GeoDirectory<= 2.8.188
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
31 minutes ago
3D Product configurator for WooCommerce<= 2.16.2
Unauthenticated Remote Code Execution vulnerability
9.8
32 minutes ago
Table Field Add-on for ACF and SCF< 1.4.1
Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Field Value vulnerability
6.5
43 minutes ago
Download Manager<= 3.3.58
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.4
1 hour ago
Hello Plus<= 1.7.7
Authenticated (Contributor+) Missing Authorization to Template Activation vulnerability
5.4
1 hour ago
Advanced Form Integration<= 2.9.0
Unauthenticated Unverified Password Change to Authentication Bypass / Privilege Escalation via Contact Form 7 Submission to Ultimate Member Update Profile Field Action vulnerability
9.8
1 hour ago
FireBox<= 3.1.13
Authenticated (Author+) SQL Injection vulnerability
5.3
1 hour ago
Feedzy<= 5.2.10
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Fastcache by Host.it<= 1.7.4
Authenticated (Administrator+) Code Injection vulnerability
7.2
1 hour ago
Download Manager<= 3.3.71
Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
4.3
2 hours ago
Download Manager<= 3.3.71
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago