The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,244
Mitigations17,058
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@nuxtjs/mdc< 0.22.1
NPM: @nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration
8.1
1 hour ago
Easy Invoice<= 2.3.8
Broken Access Control vulnerability
5.3
5 hours ago
Cooked<= 1.16.0
Insecure Direct Object References (IDOR) vulnerability
5.4
5 hours ago
Simple Membership<= 4.8.2
Broken Access Control vulnerability
5.3
5 hours ago
Booking Calendar<= 11.7
Broken Access Control vulnerability
5.3
5 hours ago
PublishPress Series<= 3.1.3
Cross Site Request Forgery (CSRF) vulnerability
5.4
5 hours ago
Geo Mashup<= 1.13.21
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
Xagio SEO<= 7.1.0.43
Cross Site Request Forgery (CSRF) vulnerability
8.8
5 hours ago
WPFunnels<= 3.12.13
Insecure Direct Object References (IDOR) vulnerability
5.3
5 hours ago
BerqWP<= 4.1.15
Broken Access Control vulnerability
5.3
5 hours ago
Multi Uploader for Gravity Forms<= 1.1.9
Unauthenticated Arbitrary File Upload vulnerability
10
5 hours ago
Paid Downloads<= 3.15
Unauthenticated Arbitrary File Upload vulnerability
10
5 hours ago
GiveWP4.16.6-4.16.8.0
Unauthenticated Account Takeover vulnerability
8.1
5 hours ago
Ni WooCommerce Sales Report< 4.2.0
Unauthenticated SQLi vulnerability
9.3
5 hours ago
Tutor LMS< 4.0.8
Read-Only API Key Privilege Escalation vulnerability
7.2
5 hours ago
ProfilePress<= 4.17.1
WordPress Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content - ProfilePress plugin <= 4.17.1 - Unauthenticated Arbitrary Plugin Installation via Brute Force vulnerability
8.1
5 hours ago
WP Import Export Lite< 3.9.33
Authenticated Arbitrary Directory Deletion vulnerability
6.5
6 hours ago
WP Import Export Lite< 3.9.33
Authenticated Arbitrary File Upload vulnerability
9.1
6 hours ago
WP Import Export Lite< 3.9.33
Authenticated RCE vulnerability
7.2
6 hours ago
WP Import Export Lite< 3.9.34
Authenticated RCE vulnerability
7.2
6 hours ago