The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,946
Mitigations16,966
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Gallagher Website Design<= 2.6.4
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
4 minutes ago
Table Manager<= 1.0.0
Authenticated (Contributor+) Sensitive Information Exposure vulnerability
4.3
4 minutes ago
HTTP Headers<= 1.19.2
Authenticated (Administrator+) External Control of File Name or Path to RCE vulnerability
7.2
4 minutes ago
CalJ Shabbat Times<= 1.5
Authenticated (Subscriber+) Arbitrary Settings Modification vulnerability
5.3
4 minutes ago
Gutentools<= 1.1.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
5 minutes ago
RTMKit<= 2.0.2
Authenticated (Author+) Local File Inclusion vulnerability
7.2
5 minutes ago
RTMKit<= 2.0.7
Authenticated (Contributor+) Limited Local File Inclusion vulnerability
4.3
5 minutes ago
WP Grid Builder<= 2.3.3
Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
10 minutes ago
Quotes llama< 3.1.6
SQL Injection vulnerability
9.3
22 minutes ago
Kali Forms< 2.4.17
Unauthenticated Media Upload vulnerability
5.3
29 minutes ago
King Addons for Elementor<= 51.1.62
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
31 minutes ago
WP Event SOlution<= 4.1.22
Authenticated (Contributor+) Local File Inclusion vulnerability
7.5
2 hours ago
User Access Manager<= 2.3.18
Reflected Cross-Site Scripting vulnerability
7.1
2 hours ago
FireBox<= 3.1.10
Authenticated (Author+) Remote Code Execution to Privilege Escalation vulnerability
8.8
2 hours ago
Contact Form to DB by BestWebSoft<= 1.7.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
ChatBot<= 8.7.3
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Repeater Fields for Gravity Forms<= 3.0.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
Product Filter by WBW<= 3.4.2
Reflected Cross-Site Scripting vulnerability
7.1
5 hours ago
WP Crowdfunding<= 2.2.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
5 hours ago
WP EasyCart<= 5.9.3
Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action vulnerability
7.2
5 hours ago