The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,457
Mitigations17,128
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Bricksforge< 3.1.8.8
Unauthenticated Arbitrary Password Reset via Pro Forms vulnerability
8.1
53 minutes ago
WP Photo Album Plus<= 9.2.09.002
Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection vulnerability
7.5
1 hour ago
Gravity Forms<= 3.1.0.4
Unauthenticated Arbitrary File Upload via Hidden File Upload Field vulnerability
10
1 hour ago
Forminator<= 1.57.2
Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter vulnerability
9.1
1 hour ago
WP Recipe Maker<= 10.8.1
Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content vulnerability
9.1
1 hour ago
WP2Social Auto Publish<= 2.4.12
Authenticated (Administrator+) Stored Cross-Site Scripting via 'pages' Parameter vulnerability
5.9
1 hour ago
Hotel Booking Lite< 6.2.3
Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint vulnerability
5.3
1 hour ago
SEO Booster<= 7.4.7
Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Modification via handle_oauth_callback() vulnerability
4.3
1 hour ago
Save as PDF<= 4.6.1
Authenticated (Contributor+) Arbitrary Function Invocation / Code Injection via 'pdf_created_callback' Shortcode Attribute vulnerability
8.8
1 hour ago
Tutor LMS<= 4.0.8
Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'student_id' Parameter vulnerability
5.3
1 hour ago
Tutor LMS<= 4.0.8
Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'lesson_id' Parameter vulnerability
4.3
1 hour ago
Divi Essentials<= 5.8.1
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
2 hours ago
BP Better Messages<= 2.15.33
Unauthenticated Information Exposure Spoofing vulnerability
5.3
2 hours ago
BP Better Messages<= 2.15.22
Reflected Cross-Site Scripting vulnerability
7.1
2 hours ago
Dictionary<= 1.0
Reflected XSS vulnerability
7.1
2 hours ago
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent< 4.4.4
Unauthenticated Stored XSS vulnerability
7.1
2 hours ago
Dewa Kirim<= 1.0.0
Unauthenticated Stored XSS vulnerability
7.1
2 hours ago
Dictionary<= 1.0
Unauthenticated Stored XSS vulnerability
7.1
2 hours ago
WP Travel Engine< 6.8.1
Subscriber+ Arbitrary Media File Move via user_profile_image vulnerability
6.5
2 hours ago
BP Better Messages<= 2.15.33
Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure vulnerability
6.5
2 hours ago