The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,300
Mitigations19,017
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@payloadcms/storage-vercel-blob>= 3.25.0, < 3.90.0
npm: @payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter
4.3
2 hours ago
odf-kit>= 0.6.0, < 0.14.2
npm: odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values
6.1
3 hours ago
Form Maker by 10Web< 1.15.51
Unauthenticated Stored XSS vulnerability
7.1
12 hours ago
GTM Server Side< 2.3.11
Unauthenticated SSRF and Same-Origin XSS vulnerability
7.1
12 hours ago
Essential Real Estate4.4.3-5.3.4
Subscriber+ Arbitrary Media Attachment Deletion vulnerability
6.5
12 hours ago
Booking Package< 1.7.34
Unauthenticated Payment Bypass vulnerability
5.3
12 hours ago
Duplicator Pro< 5.1.0
Reflected XSS vulnerability
7.1
12 hours ago
Duplicator< 5.1.0
Reflected XSS vulnerability
7.1
12 hours ago
Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance<= 1.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 hours ago
Slim Jetpack<= 2.7.0.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 hours ago
Mobile builder<= 1.4.2
Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters vulnerability
8.8
12 hours ago
Import and export users and customers<= 2.5.11
Authenticated (Custom+) Privilege Escalation vulnerability
8.8
13 hours ago
Simple Download Monitor< 4.1.3
Contributor+ Private Download Item Title and Description Disclosure vulnerability
4.3
13 hours ago
EventPrime< 4.3.6.1
Unauthenticated Pending Post Disclosure vulnerability
5.3
13 hours ago
WPDM – Premium Packages< 7.3.1
Subscriber+ Guest Order Takeover vulnerability
5.4
13 hours ago
VikWidgetsLoader< 1.12.3
Contributor+ Stored XSS vulnerability
6.5
13 hours ago
All-in-One Video Gallery< 5.0.0
Contributor+ Stored XSS vulnerability
6.5
13 hours ago
WPDM – Premium Packages< 7.3.1
Unauthenticated Cross-User Saved Cart Disclosure vulnerability
5.3
13 hours ago
WPDM – Premium Packages< 7.3.1
Unauthenticated Guest Order Status Disclosure vulnerability
3.7
13 hours ago
WPvivid Backup and Migration< 0.9.138
Admin+ Path Traversal vulnerability
5.5
13 hours ago