The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,121
Mitigations18,943
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Uncanny Toolkit for LearnDash<= 3.8.2
Unauthenticated Authentication Bypass vulnerability
9.8
3 minutes ago
WP User Frontend<= 4.3.13
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
4 minutes ago
Wp Social<= 3.2.2
Unauthenticated Authentication Bypass vulnerability
8.1
5 minutes ago
WP Content Pilot<= 2.2.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
11 minutes ago
EasyJobs<= 2.8.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 minutes ago
WP User Frontend<= 4.3.13
Reflected Cross-Site Scripting vulnerability
7.1
12 minutes ago
WP Project Manager<= 4.1.1
Unauthenticated Remote Code Execution vulnerability
9.8
12 minutes ago
Redux Framework<= 4.5.15
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
13 minutes ago
WPO365 | MICROSOFT 365 GRAPH MAILER<= 6.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 minutes ago
WP Data Access<= 5.5.88
Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability
5.9
13 minutes ago
SEOPress<= 10.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
14 minutes ago
WP2LEADS<= 3.5.6
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
14 minutes ago
Rox Appointment Booking &#8211; Appointment Booking Scheduling Solution<= 1.3.1
Unauthenticated Privilege Escalation vulnerability
8.8
14 minutes ago
Product Filter by WBW<= 3.4.6
Reflected Cross-Site Scripting vulnerability
7.1
14 minutes ago
UsersWP<= 1.2.78
Unauthenticated Account Access vulnerability
6.5
15 minutes ago
WP Mail Catcher<= 2.2.0
Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email Disclosure vulnerability
7.5
16 minutes ago
WP Job Portal<= 2.7.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
16 minutes ago
ThirstyAffiliates<= 3.12.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
17 minutes ago
PPWP<= 1.9.26
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
17 minutes ago
GeoDirectory<= 2.8.199
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
17 minutes ago