The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total46,530
Mitigations15,112
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP Meteor Page Speed Optimization Topping<= 3.4.16
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
Complianz<= 7.4.5
Missing Authorization to Unauthenticated Private Post Content Disclosure vulnerability
5.3
1 day ago
Check & Log Email< 2.0.13
Unauthenticated Stored XSS vulnerability
7.1
2 days ago
Woostify<= 2.5.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 days ago
Timeline Blocks for Gutenberg<= 1.1.10
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 days ago
Social Post Embed<= 2.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 days ago
WP User Frontend<= 4.3.1
Broken Access Control vulnerability
6.5
2 days ago
Order Delivery Date for WooCommerce<= 4.5.1
SQL Injection vulnerability
9.3
2 days ago
Profile Builder Pro<= 3.15.0
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
Simply Schedule Appointments< 1.6.11.2
Sensitive Data Exposure vulnerability
7.5
2 days ago
Funnel Builder by FunnelKit<= 3.15.0.1
SQL Injection vulnerability
9.3
2 days ago
AI Lab< 5.4.2
PHP Object Injection vulnerability
9.8
2 days ago
LatePoint<= 5.4.1
Authenticated (Agent+) Privilege Escalation to Administrator via 'connect-customer-to-wp-user' Ability vulnerability
8.8
3 days ago
TheGem Theme Elements (for Elementor)< 5.12.1.1
Cross Site Scripting (XSS) vulnerability
6.5
3 days ago
Highland Software Custom Role Manager<= 1.0.0
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
3 days ago
SureForms Pro<= 2.8.0
Broken Access Control vulnerability
7.3
3 days ago
Templately<= 3.6.1
Sensitive Data Exposure vulnerability
7.7
3 days ago
myCred<= 3.0.3
Broken Access Control vulnerability
6.5
5 days ago
Groundhogg< 4.4.1
Broken Access Control vulnerability
6.5
5 days ago
HT Mega< 3.0.7
Unauthenticated PII Disclosure vulnerability
7.5
6 days ago