The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total56,121
Mitigations18,959
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Meow Lightbox<= 5.6.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
49 minutes ago
Ninja Forms<= 3.15.5
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
50 minutes ago
CP Multi View Event Calendar <= 1.4.43
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
50 minutes ago
NextGEN Gallery<= 4.5.4
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
50 minutes ago
FV Flowplayer Video Player<= 7.5.55.7212
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
50 minutes ago
FV Flowplayer Video Player<= 7.5.55.7212
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
51 minutes ago
Avada<= 7.16.2
Unauthenticated Arbitrary File Upload vulnerability
8.1
1 hour ago
FV Flowplayer Video Player<= 7.5.55.7212
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
NextGEN Gallery<= 4.4.1
Authenticated (Custom+) Local File Inclusion vulnerability
7.5
1 hour ago
User Submitted Posts<= 20260916
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
W3 Total Cache<= 2.10.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
PDF Invoice Builder for WooCommerce<= 7.1.1
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
9.8
1 hour ago
WP ERP<= 1.17.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
WooCommerce PDF Invoices & Packing Slips<= 5.16.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Welcart e-Commerce<= 2.12.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
W3 Total Cache<= 2.10.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Shield Security<= 22.3.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Spectra<= 2.20.4
Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification vulnerability
6.5
1 hour ago
Uncanny Toolkit for LearnDash<= 3.8.2
Unauthenticated Authentication Bypass vulnerability
9.8
1 hour ago
WP User Frontend<= 4.3.13
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
1 hour ago