Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1490 matches found

Patchstack
Patchstack•added 2026/02/03 6:45 a.m.•11 views

WordPress Snippet Shortcodes plugin <= 4.1.6 - Authenticated (Subscriber+) Shortcode Deletion vulnerability

Authenticated Subscriber+ Shortcode Deletion vulnerability discovered by theviper17y in WordPress Plugin Snippet Shortcodes versions = 4.1.6...

4.3CVSS5.3AI score0.00374EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/03 5:29 a.m.•8 views

WordPress Post to Pdf plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Post to Pdf versions = 1.0...

6.4CVSS5.4AI score0.00276EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/03 1:18 a.m.•11 views

WordPress Shortcodes and extra features for Phlox theme plugin <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'auxtimeline' Shortcode vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Shortcodes and extra features for Phlox theme versions = 2.15.7...

6.4CVSS5.4AI score0.00404EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:00 p.m.•13 views

WordPress Elementor Addon Elements plugin <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Dual Button Widget vulnerability discovered by RandomRoot in WordPress Plugin Elementor Addon Elements versions = 1.12.12...

6.4CVSS7.1AI score0.00509EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 8:39 p.m.•13 views

WordPress Elementor Addons by Livemesh plugin <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Animated Text Widget vulnerability discovered by wesley wcraft in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.4...

6.4CVSS8.3AI score0.00427EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 8:30 p.m.•11 views

WordPress Shortcodes and extra features for Phlox theme plugin <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Shortcodes and extra features for Phlox theme versions = 2.15.7...

6.4CVSS5.3AI score0.00404EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 7:42 p.m.•16 views

WordPress Elementor Addon Elements plugin <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Elementor Addon Elements versions = 1.13.2...

5.4CVSS8.3AI score0.00516EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 7:39 p.m.•10 views

WordPress Ultimate Addons for Beaver Builder - Lite plugin <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget vulnerability

WordPress Ultimate Addons for Beaver Builder - Lite plugin = 1.5.7 - Authenticated Contributor+ Stored Cross-Site Scripting via Advanced Icons Widget vulnerability discovered by Francesco Carlucci in WordPress Plugin Ultimate Addons for Beaver Builder – Lite versions = 1.5.7...

6.4CVSS8.3AI score0.00343EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 7:22 p.m.•16 views

WordPress The Plus Addons for Elementor plugin <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing vulnerability

Authenticated Contributor+ Local File Inclusion via Team Member Listing vulnerability discovered by wesley wcraft in WordPress Plugin The Plus Addons for Elementor Page Builder Lite versions = 5.4.1...

6.4CVSS8.3AI score0.00483EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 2:23 p.m.•12 views

WordPress Happy Addons for Elementor plugin <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via titletag vulnerability discovered by wesley wcraft in WordPress Plugin Happy Addons for Elementor versions = 3.10.4...

5.4CVSS5.3AI score0.00462EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 2:22 p.m.•15 views

WordPress Happy Addons for Elementor plugin <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Post Title HTML Tag vulnerability discovered by João Pedro Soares de Alcântara - Kinorth in WordPress Plugin Happy Addons for Elementor versions = 3.10.4...

6.4CVSS5.3AI score0.00358EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 2:08 p.m.•15 views

WordPress WPB Elementor Addons plugin <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by WordFence in WordPress Plugin WPB Elementor Addons versions = 1.0.9...

6.4CVSS5.3AI score0.00229EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 12:47 p.m.•13 views

WordPress Shortcodes and extra features for Phlox theme plugin <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_gmaps' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'auxgmaps' Shortcode vulnerability discovered by stealthcopter in WordPress Plugin Shortcodes and extra features for Phlox theme versions = 2.15.7...

6.4CVSS5.3AI score0.00543EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 12:40 p.m.•17 views

WordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Titles vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Widget Titles vulnerability discovered by Vincent Bao in WordPress Plugin themesflat-addons-for-elementor versions = 2.1.2...

6.4CVSS5.3AI score0.00345EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 12:37 p.m.•12 views

WordPress The Plus Addons for Elementor - Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

WordPress The Plus Addons for Elementor - Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin = 5.5.2 - Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin The Plus Addons for Elementor Page Builder Lite...

6.4CVSS5.4AI score0.00322EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:34 a.m.•15 views

WordPress Elementor Addons by Livemesh plugin <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Posts Grid vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.7...

6.4CVSS5.3AI score0.00345EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:27 a.m.•14 views

WordPress Enter Addons plugin <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tag vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Animation Title widget img tag vulnerability discovered by Sebastião Gavião Sebastgav - Gavsec in WordPress Plugin Enter Addons versions = 2.1.5...

6.4CVSS5.3AI score0.00429EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:20 a.m.•20 views

WordPress Porto Theme - Functionality plugin <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post Meta vulnerability

WordPress Porto Theme - Functionality plugin = 3.0.9 - Authenticated Contributor+ Local File Inclusion via Post Meta vulnerability discovered by István Márton - Wordfence in WordPress Plugin Porto Theme - Functionality versions = 3.0.9...

8.8CVSS5.2AI score0.01002EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:08 a.m.•12 views

WordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting in Multiple Widgets vulnerability discovered by stealthcopter in WordPress Plugin themesflat-addons-for-elementor versions = 2.1.2...

6.4CVSS5.2AI score0.00425EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:07 a.m.•12 views

WordPress Ultimate Blocks plugin <= 3.1.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks vulnerability

AuthenticatedContributor+ Stored Cross-Site Scripting via Multiple Blocks vulnerability discovered by Webbernaut in WordPress Plugin Ultimate Blocks versions = 3.1.9...

6.4CVSS5.3AI score0.00493EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder