The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,766
Mitigations16,528
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Welcart e-Commerce< 2.11.32
Editor+ SQL Injection via CSV Import vulnerability
8.5
2 hours ago
Brizy< 2.8.19
WordPress Brizy - Page Builder plugin < 2.8.19 - Author+ Stored XSS via brizy_set_project Global Project Code Asset vulnerability
5.9
2 hours ago
Brizy< 2.8.19
WordPress Brizy - Page Builder plugin < 2.8.19 - Contributor+ Stored XSS via Featured Image Focal Point vulnerability
6.5
2 hours ago
Contest Gallery< 30.0.7
Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library vulnerability
2.7
2 hours ago
Classified Listing< 5.4.4
Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search vulnerability
4.3
2 hours ago
Contest Gallery< 30.0.7
Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts vulnerability
4.3
2 hours ago
Easy Integration for Dropbox< 2.2.0
Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX vulnerability
9.3
3 hours ago
miniOrange's Google Authenticator< 6.2.7
Subscriber+ Arbitrary-Recipient OTP Send vulnerability
4.3
3 hours ago
Meow Gallery< 5.5.2
Author+ Stored XSS via Attachment Alt-Text vulnerability
5.9
3 hours ago
Ajax Load More< 8.0.1
Unauthenticated SQL Injection via custom_args vulnerability
9.3
3 hours ago
BNE Testimonials< 2.0.8.2
Contributor+ Stored XSS via Slider Shortcode vulnerability
6.5
3 hours ago
HUSKY< 1.4.1
WordPress HUSKY - Products Filter Professional for WooCommerce plugin < 1.4.1 - Shop Manager+ Local File Inclusion via meta_filter search_view vulnerability
7.2
3 hours ago
s2Member< 260805
Contributor+ Stored XSS via Shortcode vulnerability
6.5
3 hours ago
Nested Pages< 3.2.15
Editor+ Stored XSS via Post Title vulnerability
6.5
3 hours ago
Customer Reviews for WooCommerce< 5.116.0
Subscriber+ Missing Authorization via Multiple Settings AJAX Actions vulnerability
5.4
3 hours ago
Contact Form Entries< 1.5.5
Authenticated SQL Injection via id Parameter vulnerability
7.6
3 hours ago
Quiz And Survey Master< 11.2.2
Contributor+ Stored XSS via Polar Question vulnerability
6.5
3 hours ago
Advanced Excerpt< 4.5
Admin+ Stored XSS via Ellipsis Setting vulnerability
5.9
3 hours ago
Google Authenticator< 0.56
2FA Secret Overwrite via CSRF vulnerability
5.4
3 hours ago
WP Cafe Pro< 3.0.15
Local File Inclusion vulnerability
6.6
5 hours ago