Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

16361 matches found

Patchstack
Patchstack•added 2026/02/02 9:35 a.m.•12 views

WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via contentblock Shortcode vulnerability discovered by Alex Thomas - Wordfence in WordPress Plugin Content Blocks Custom Post Widget versions = 3.3.0...

6.4CVSS5.3AI score0.00314EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:33 a.m.•15 views

WordPress Premium Addons for Elementor plugin <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'arrowstyle' vulnerability discovered by stealthcopter in WordPress Plugin Premium Addons for Elementor versions = 4.10.28...

6.4CVSS5.3AI score0.0044EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:26 a.m.•14 views

WordPress Happy Addons for Elementor plugin <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline vulnerability discovered by stealthcopter in WordPress Plugin Happy Addons for Elementor versions = 3.10.4...

6.4CVSS5.3AI score0.00543EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:21 a.m.•14 views

WordPress Essential Addons for Elementor plugin <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle vulnerability discovered by stealthcopter in WordPress Plugin Essential Addons for Elementor versions = 5.9.15...

6.4CVSS5.2AI score0.00552EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:20 a.m.•22 views

WordPress Porto Theme - Functionality plugin <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post Meta vulnerability

WordPress Porto Theme - Functionality plugin = 3.0.9 - Authenticated Contributor+ Local File Inclusion via Post Meta vulnerability discovered by István Márton - Wordfence in WordPress Plugin Porto Theme - Functionality versions = 3.0.9...

8.8CVSS5.2AI score0.01002EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:20 a.m.•17 views

WordPress Salient Shortcodes plugin <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode vulnerability

Authenticated Contributor+ Local File Inclusion via Shortcode vulnerability discovered by István Márton - Wordfence in WordPress Plugin Salient Shortcodes versions = 1.5.3...

8.8CVSS5.3AI score0.00619EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:19 a.m.•14 views

WordPress Salient Shortcodes plugin <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by István Márton - Wordfence in WordPress Plugin Salient Shortcodes versions = 1.5.3...

6.4CVSS5.3AI score0.00269EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:19 a.m.•15 views

WordPress Salient Core plugin <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode vulnerability

Authenticated Contributor+ Local File Inclusion via Shortcode vulnerability discovered by István Márton - Wordfence in WordPress Plugin Salient Core versions = 2.0.7...

7.5CVSS5.3AI score0.00632EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:10 a.m.•12 views

WordPress Royal Elementor Addons and Templates plugin <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Back to Top Widget vulnerability discovered by wesley wcraft in WordPress Plugin Royal Elementor Addons versions = 1.3.975...

6.4CVSS5.4AI score0.00322EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:03 a.m.•13 views

WordPress Premium Addons for Elementor plugin <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Fancy Text Widget vulnerability discovered by Webbernaut in WordPress Plugin Premium Addons for Elementor versions = 4.10.31...

6.4CVSS5.3AI score0.00329EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 9:01 a.m.•13 views

WordPress Elementor Addon Elements plugin <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via id and eaeslideranimation Parameters vulnerability discovered by stealthcopter in WordPress Plugin Elementor Addon Elements versions = 1.13.5...

6.4CVSS5.3AI score0.00329EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 8:59 a.m.•17 views

WordPress Essential Addons for Elementor plugin <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via Several Widgets vulnerability discovered by Webbernaut in WordPress Plugin Essential Addons for Elementor versions = 5.9.19...

6.4CVSS5.2AI score0.0034EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 8:30 a.m.•13 views

WordPress Enter Addons plugin <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Events Card Widget vulnerability discovered by lowol in WordPress Plugin Enter Addons versions = 2.1.8...

6.4CVSS5.3AI score0.00322EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 7:34 a.m.•15 views

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'email' vulnerability discovered by shaman0x01 - Shaman Red Team in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 1.5.112...

6.4CVSS5.3AI score0.00473EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack•added 2026/02/02 6:55 a.m.•14 views

WordPress WP-WebAuthn plugin <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wwa_login_form Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via wwaloginform Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin WP-WebAuthn versions = 1.3.3...

6.4CVSS5.9AI score0.00394EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/01/30 8:41 a.m.•14 views

WordPress Genesis Blocks plugin < 3.1.3 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Genesis Blocks versions 3.1.3...

6.8CVSS5.9AI score0.00665EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack•added 2026/01/30 8:25 a.m.•13 views

WordPress PostX plugin < 4.0.2 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin PostX versions 4.0.2...

5.4CVSS5.9AI score0.00416EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack•added 2026/01/30 8:24 a.m.•15 views

WordPress All in One SEO plugin < 4.6.1.1 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmtirii Ignatyev in WordPress Plugin All In One SEO Pack versions 4.6.1.1...

6.1CVSS5.9AI score0.00369EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack•added 2026/01/30 3:10 a.m.•11 views

WordPress Pet Manager plugin <= 1.4 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Pet Manager versions = 1.4...

4.8CVSS5.9AI score0.00351EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack•added 2026/01/29 10:27 p.m.•13 views

WordPress Quiz And Survey Master plugin < 9.0.2 - Contributor+ SQLi vulnerability

Contributor+ SQLi vulnerability discovered by Project Black in WordPress Plugin Quiz And Survey Master versions 9.0.2...

8.8CVSS5.9AI score0.00591EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder