The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total54,558
Mitigations18,072
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Hyyan WooCommerce Polylang Integration<= 1.5.0
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
36 minutes ago
Directorist<= 8.10.2.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
36 minutes ago
PO/MO Editor<= 1.4.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
37 minutes ago
Cryptocurrency Donation Box – Bitcoin & Crypto Donations<= 2.2.13
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
37 minutes ago
Document Gallery<= 5.1.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
37 minutes ago
Social Share Buttons & Analytics Plugin – GetSocial.io<= 4.5
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
38 minutes ago
AGE-GATE<= 1.0
Unauthenticated Remote Code Execution vulnerability
9.8
38 minutes ago
WP Event Solution<= 4.1.25
Broken Access Control vulnerability
5.3
59 minutes ago
Download Monitor integration for WooCommerce<= 1.0.3
Broken Access Control vulnerability
4.3
1 hour ago
Premium Addons for Elementor<= 4.11.110
Broken Access Control vulnerability
5.3
1 hour ago
Widget Countdown3.0.0-3.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Fusion Builder<= 3.16.1
Unauthenticated Sensitive Information Exposure in 'args[link_target]' Parameter vulnerability
5.3
2 hours ago
AnyComment<= 0.3.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
WooCommerce Bookings< 3.11.0
Unauthenticated Denial of Service vulnerability
5.9
2 hours ago
Bit Integrations<= 2.10.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Abandoned Cart Pro for WooCommerce<= 10.8.0
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Abandoned Cart Pro for WooCommerce<= 10.8.0
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Abandoned Cart Pro for WooCommerce<= 10.8.0
Unauthenticated Authentication Bypass vulnerability
9.8
2 hours ago
Snazzy Social Media Feed<= 2.5
Unauthenticated Arbitrary File Upload vulnerability
9.8
2 hours ago
Contact Form 7 Database Addon – CFDB7<= 1.4.1
Unauthenticated Limited File Deletion vulnerability
5.3
2 hours ago