The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,777
Mitigations16,899
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
SureForms<= 2.12.2
Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload vulnerability
7.1
8 minutes ago
QuickCal - Appointment Booking Calendar for WordPress<= 1.0.20
Unauthenticated Stored Cross-Site Scripting via Custom Field Parameters vulnerability
7.1
15 minutes ago
Beaver Builder Plugin (Starter Version)<= 2.11.0.1
Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter vulnerability
7.1
47 minutes ago
iubenda<= 3.13.4
Unauthenticated Stored Cross-Site Scripting via Comment Content via AdSense Regex Rewrite vulnerability
7.1
1 hour ago
iubenda<= 3.13.4
Unauthenticated Stored Cross-Site Scripting via Comment Content vulnerability
7.1
1 hour ago
Music Store< 1.4.5
Unauthenticated SQLi vulnerability
9.3
2 hours ago
JetFormBuilder< 3.6.5.2
Unauthenticated Password Hash and Arbitrary Metadata Disclosure vulnerability
7.5
2 hours ago
SureCart< 4.6.3
Subscriber+ Administrator Account Takeover vulnerability
8.8
2 hours ago
WP Fusion (Pro)<= 3.47.13
Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter vulnerability
7.5
2 hours ago
HivePress Authentication<= 1.1.4
Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator vulnerability
7.5
2 hours ago
Frontend Admin by DynamiApps<= 3.29.12
Unauthenticated Account Takeover via '_acf_objects' Object Identifier vulnerability
9.8
2 hours ago
memberdash<= 1.8.5
Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter vulnerability
9.8
3 hours ago
Nokri<= 1.6.4
WordPress Nokri - Job Board WordPress theme plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover vulnerability
8.8
3 hours ago
Otter - Gutenberg Block<= 3.1.7
Missing Authorization to Unauthenticated Purchase Verification Bypass vulnerability
5.3
3 hours ago
Masteriyo - LMS<= 2.2.0
Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion vulnerability
5.3
3 hours ago
Powerkit<= 3.0.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing vulnerability
6.5
3 hours ago
Flamingo<= 2.6.2
Authenticated (Contributor+) Missing Authorization to Unauthorized Tag Information Disclosure via wp.getTerms and ajax-tag-search vulnerability
4.3
3 hours ago
SEO Flow by LupsOnline3.0.0-3.0.2
Unauthenticated Privilege Escalation vulnerability
9.8
4 hours ago
Ninja Forms3.14.10-3.15.1
Unauthenticated Arbitrary Shortcode Execution vulnerability
4.8
1 day ago
Redirection for Contact Form 72.2.7-3.2.10
Unauthenticated Arbitrary Shortcode Execution vulnerability
4.8
1 day ago