The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,586
Mitigations18,086
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
FV Player 8<= 8.1.7
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
4 minutes ago
NewStatPress<= 1.4.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
7 minutes ago
LatePoint<= 5.7.3
Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
10 minutes ago
Form Maker by 10Web<= 1.15.48
Unauthenticated SQL Injection vulnerability
7.5
18 minutes ago
JTL-Connector for WooCommerce<= 2.4.3
Unauthenticated SQL Injection vulnerability
9.3
23 minutes ago
Mang Board WP<= 2.4.3
Unauthenticated Local File Inclusion vulnerability
8.1
33 minutes ago
FormFlow<= 3.10.0
Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment vulnerability
9.8
38 minutes ago
ShopMagic<= 4.9.0
Unauthenticated Local File Inclusion vulnerability
8.1
55 minutes ago
FV Flowplayer Video Player<= 7.5.54.7212
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
1 hour ago
Restricted Site Access<= 7.6.2
Broken Access Control vulnerability
5.3
1 hour ago
CP Multi View Event Calendar <= 1.4.41
SQL Injection vulnerability
8.5
1 hour ago
LatePoint<= 5.7.2
Unauthenticated Authentication Bypass to Customer Account Takeover vulnerability
7.4
1 hour ago
PeproDev Branches Map<= 3.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
12 hours ago
Post Export Import with Media<= 1.17.1
Authenticated (Administrator+) PHP Object Injection vulnerability
7.2
12 hours ago
Mang Board WP<= 2.4.3
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.5
13 hours ago
LatePoint<= 5.7.3
Authenticated (Subscriber+) Sensitive Information Exposure in 'first_name' Parameter Template Re-expansion vulnerability
4.3
13 hours ago
Gallery Custom Links<= 2.3.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
4.9
13 hours ago
JTL-Connector for WooCommerce<= 2.4.3
Unauthenticated Arbitrary File Upload vulnerability
9.8
14 hours ago
FV Flowplayer Video Player<= 7.5.54.7212
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
14 hours ago
Hyyan WooCommerce Polylang Integration<= 1.5.0
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
15 hours ago