The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total44,230
Mitigations17,636
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WordPress7.1-7.1.2
Unauthenticated Stored Cross-Site Scripting via Pending Comments (Comments administration screen) vulnerability
7.1
4 hours ago
WordPress<= 7.1.2
Authenticated (Contributor+) Stored Cross-Site Scripting via Imgur oEmbed vulnerability
6.5
4 hours ago
WordPress<= 7.1.2
Author+ Broken Access Control to Sticky Posts via REST API vulnerability
4.3
4 hours ago
WordPress<= 7.1.2
Contributor+ DoS via infinite loop in WP_Http::make_absolute_url() vulnerability
4.3
4 hours ago
WordPress<= 7.1.2
Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
6.9
4 hours ago
Kirki<= 6.3.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
elegro Crypto Payment<= 1.0.1
Unauthenticated Arbitrary Order Status Change vulnerability
5.3
10 hours ago
Deema Payment Gateway<= 1.1.2
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
12 hours ago
Deema Payment Gateway<= 1.1.2
Unauthenticated Payment Bypass and Order Manipulation vulnerability
5.3
12 hours ago
JetElements For Elementor<= 2.9.2.2
Cross Site Scripting (XSS) vulnerability
6.5
14 hours ago
Slider Pro<= 1.0.0
Unauthenticated Sensitive Data Disclosure vulnerability
5.3
16 hours ago
File Media Renamer<= 1.3
Author+ Arbitrary File Rename vulnerability
6.5
16 hours ago
Fast Courier<= 5.2.3
Unauthenticated Order Fulfillment Update vulnerability
5.3
16 hours ago
ACPT (Pro) - Custom Post Types Plugin for WordPress<= 2.0.66
Authenticated (Subscriber+) Remote Code Execution vulnerability
8.8
1 day ago
Post SMTP<= 4.0.1
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 day ago
Image Slider Widget<= 1.1.130
Cross Site Scripting (XSS) vulnerability
6.5
1 day ago
File Uploads Addon for WooCommerce1.7.2-1.7.6
Unauthenticated Direct File Access vulnerability
5.9
1 day ago
File Uploads Addon for WooCommerce1.7.2-1.7.5
Unauthenticated Customer Uploaded File Disclosure vulnerability
5.9
1 day ago
Kit (formerly ConvertKit) for WooCommerce<= 2.2.0
Broken Access Control vulnerability
5.3
1 day ago
Polylang<= 3.8.7
Sensitive Data Exposure vulnerability
4.3
1 day ago