The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total37,760
Mitigations13,803
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Tutor LMS<= 3.9.5
Authenticated (Subscriber+) Information Disclosure in Coupon Details via 'tutor_coupon_details' AJAX Action vulnerability
5.3
7 minutes ago
Happy Addons for Elementor<= 3.20.7
Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field vulnerability
6.5
41 minutes ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget vulnerability
6.5
45 minutes ago
Spectra<= 2.19.17
Unauthenticated Information Disclosure in Sensitive Data vulnerability
5.3
47 minutes ago
WP ULike<= 4.8.3.1
Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Log Deletion via 'id' Parameter vulnerability
5.3
49 minutes ago
Popup box<= 6.1.1
Cross-Site Request Forgery to Popup Status Change vulnerability
4.3
1 hour ago
Motors<= 1.4.57
WordPress Motors - Car Dealer, Classifieds & Listing plugin <= 1.4.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation vulnerability
4.3
1 hour ago
Master Slider<= 3.10.6
WordPress Master Slider - Responsive Touch Slider plugin <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode vulnerability
6.5
1 hour ago
Relevanssi Premium<= 2.25.0
Missing Authorization to Unauthenticated Query Log Export vulnerability
5.3
1 hour ago
Relevanssi <= 4.22.0
Missing Authorization to Unauthenticated Query Log Export vulnerability
5.3
1 hour ago
Paid Member Subscriptions<= 2.11.1
WordPress Paid Membership Subscriptions - Effortless Memberships, Recurring Payments & Content Restriction plugin <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return vulnerability
5.3
1 hour ago
Elementor Addon Elements<= 1.12.12
Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget vulnerability
6.5
2 hours ago
Elementor Addon Elements<= 1.12.12
Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget vulnerability
6.5
2 hours ago
Shortcodes and extra features for Phlox theme<= 2.15.7
Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' vulnerability
6.5
2 hours ago
Element Pack Elementor Addons<= 5.6.0
Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget vulnerability
6.5
2 hours ago
Element Pack Elementor Addons<= 5.6.0
Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget vulnerability
6.5
2 hours ago
Livemesh Addons for Elementor<= 8.3.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget vulnerability
6.5
2 hours ago
Livemesh Addons for Elementor<= 8.3.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget vulnerability
6.5
2 hours ago
Livemesh Addons for Elementor<= 8.3.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget vulnerability
6.5
2 hours ago
Livemesh Addons for Elementor<= 8.3.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widget vulnerability
6.5
2 hours ago