The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total53,407
Mitigations17,510
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Magic Tooltips For Contact Form 7<= 1.0.34
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 minutes ago
GeoDirectory<= 2.8.186
Unauthenticated SQL Injection vulnerability
7.5
12 minutes ago
GD Rating System<= 3.7.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 minutes ago
All In One SEO Pack<= 5.0.2
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
13 minutes ago
Transliterator<= 2.5.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
14 minutes ago
Welcart e-Commerce<= 2.12.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
19 minutes ago
WPFront Notification Bar<= 3.5.1
Reflected Cross-Site Scripting vulnerability
7.1
19 minutes ago
Calculated Fields Form<= 5.5.1.5
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
20 minutes ago
Visitors Traffic Real Time Statistics<= 8.16
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
26 minutes ago
Photo Gallery by 10Web<= 1.8.46
Reflected Cross-Site Scripting vulnerability
7.1
27 minutes ago
Photo Reviews for WooCommerce<= 1.2.30
Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability
7.1
34 minutes ago
WPMobile.App<= 11.84
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
35 minutes ago
WPC Product Options for WooCommerce<= 4.0.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
37 minutes ago
Wp Ultimate Review<= 2.4.3
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
4.3
39 minutes ago
WP Mail Catcher<= 2.1.12
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
54 minutes ago
WPC Smart Quick View for WooCommerce<= 4.4.0
Reflected Cross-Site Scripting vulnerability
7.1
1 hour ago
probe-image-size<= 7.3.0
NPM: probe-image-size: Quadratic-time Denial of Service in the SVG Parser
7.5
10 hours ago
@fastify/busboy>= 1.0.0, < 3.2.1
NPM: @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
7.5
10 hours ago
@fastify/busboy>= 3.1.0, < 3.2.1
NPM: @fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
7.5
10 hours ago
@a2ui/web_core>= 0.9.0, < 0.10.2
NPM: @a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions
9.3
10 hours ago