The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total38,690
Mitigations14,235
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Geo Mashup<= 1.13.17
Unauthenticated SQL Injection via 'sort' Parameter vulnerability
9.3
8 hours ago
Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins.<= 3.8.3
Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Token vulnerability
7.5
8 hours ago
Post Duplicator<= 3.0.8
Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter vulnerability
4.3
15 hours ago
WP Recipe Maker<= 10.2.3
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
4.3
15 hours ago
Disable Admin Notices individually<= 1.4.2
WordPress Disable Admin Notices - Hide Dashboard Notifications plugin <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update vulnerability
4.3
16 hours ago
Secure Copy Content Protection and Content Locking<= 5.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute vulnerability
6.5
16 hours ago
Responsive Lightbox<= 2.7.1
Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload vulnerability
5
16 hours ago
Rise Blocks<= 3.7
WordPress Rise Blocks - A Complete Gutenberg Page Builder plugin <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Identity Block Attributes vulnerability
6.5
17 hours ago
ElementsKit Elementor addons Lite< 3.7.9
Unauthenticated Mailchimp REST Endpoint vulnerability
6.5
1 day ago
The Plus Addons for Elementor Page Builder Lite<= 6.4.7
WordPress The Plus Addons for Elementor - Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin <= 6.4.7 - Unauthenticated Email Relay vulnerability
5.3
1 day ago
Conditional CAPTCHA<= 4.0.0
Open Redirect vulnerability
4.7
1 day ago
Ebook Store<= 5.8001
Reflected Cross-Site Scripting via 'step' vulnerability
7.1
1 day ago
WP Ad Guru<= 2.5.4
Reflected Cross-Site Scripting vulnerability
7.1
1 day ago
DesignThemes Directory Addon<= 1.8
Broken Access Control vulnerability
7.5
2 days ago
DesignThemes Booking Manager<= 2.0
Broken Access Control vulnerability
7.5
2 days ago
WeDesignTech Ultimate Booking Addon<= 1.0.1
Account Takeover vulnerability
9.8
2 days ago
WeDesignTech Ultimate Booking Addon<= 1.0.1
Account Takeover vulnerability
8.8
2 days ago
Classified Listing<= 5.3.4
Sensitive Data Exposure vulnerability
6.5
2 days ago
Directory Pro<= 2.5.6
Broken Access Control vulnerability
7.3
2 days ago
Really Simple Security Pro<= 9.5.3.1
Insecure Direct Object References (IDOR) vulnerability
6.5
2 days ago