The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,180
Mitigations18,980
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
PublishPress Authors<= 4.17.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
9 hours ago
WooCommerce PDF Invoices & Packing Slips5.16.2-5.16.4
Unauthenticated Stored XSS vulnerability
7.1
9 hours ago
NextGEN Gallery<= 4.4.1
Authenticated (Custom+) Remote Code Execution vulnerability
8.8
9 hours ago
FlexStock<= 3.17.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
9 hours ago
Relevanssi <= 4.28.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
WP Directory Kit<= 1.6.0
Unauthenticated SQL Injection vulnerability
9.3
9 hours ago
Contact Form 76.2-6.2.3
Unauthenticated Arbitrary File Upload
8.1
9 hours ago
Ninja Forms<= 3.15.5
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
9 hours ago
Independent Analytics Pro<= 2.15.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Buddyboss Platform<= 3.6.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
9 hours ago
Ninja Forms<= 3.15.5
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
9 hours ago
WooCommerce Extra Product Options Pro<= 3.3.2
Reflected Cross-Site Scripting vulnerability
7.1
9 hours ago
Essential Addons for Elementor6.6.0-6.8.7
Author+ Privilege Escalation vulnerability
8.8
9 hours ago
Debug Log Manager<= 2.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Web 2.0 Directory plugin for WordPress<= 2.10.12
Unauthenticated SQL Injection vulnerability
9.3
9 hours ago
FeedWordPress<= 2026.0517
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
GeoDirectory<= 2.8.197
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
9 hours ago
SiteGround Security< 1.6.9
2FA Bypass vulnerability
7.5
9 hours ago
WP Activity Log<= 5.6.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
FormFlow<= 3.10.2
Unauthenticated Arbitrary File Upload vulnerability
10
9 hours ago