Patchstack - Page 114 of Patchstack Vulnerabilities List

PatchstackRecent

47982 matches found

Patchstack•added 2026/01/30 9:0 a.m.•14 views

WordPress Himer theme < 2.1.1 - Bypass Poll Voting Restrictions via CSRF vulnerability

Bypass Poll Voting Restrictions via CSRF vulnerability discovered by Sushmita Poudel in WordPress Theme Himer versions 2.1.1...

6.3CVSS5.9AI score0.00193EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:57 a.m.•16 views

WordPress The Ultimate Video Player For WordPress plugin < 2.2.3 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Presto Player versions 2.2.3...

4.7CVSS5.9AI score0.00495EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:43 a.m.•8 views

WordPress VikBooking plugin < 1.6.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by cyc707 in WordPress Plugin VikBooking Hotel Booking Engine & PMS versions 1.6.8...

5.9CVSS5.9AI score0.0028EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:41 a.m.•13 views

WordPress Genesis Blocks plugin < 3.1.3 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Genesis Blocks versions 3.1.3...

6.8CVSS5.9AI score0.00665EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:26 a.m.•12 views

WordPress Tutor LMS plugin <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Course Completion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Course Completion vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Tutor LMS versions = 3.9.2...

4.3CVSS5.9AI score0.00202EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 8:25 a.m.•11 views

WordPress PostX plugin < 4.0.2 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin PostX versions 4.0.2...

5.4CVSS5.9AI score0.00416EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:24 a.m.•10 views

WordPress All in One SEO plugin < 4.6.1.1 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmtirii Ignatyev in WordPress Plugin All In One SEO Pack versions 4.6.1.1...

6.1CVSS5.9AI score0.00369EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:24 a.m.•10 views

WordPress WP Prayer plugin <= 2.0.9 - Email Settings Update via CSRF vulnerability

Email Settings Update via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Prayer versions = 2.0.9...

8.8CVSS5.9AI score0.00347EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:23 a.m.•10 views

WordPress WP Prayer plugin <= 2.0.9 - Arbitrary Prayer Deletion via CSRF vulnerability

Arbitrary Prayer Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Prayer versions = 2.0.9...

5.3CVSS5.9AI score0.00189EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:14 a.m.•13 views

WordPress Community by PeepSo plugin < 6.3.1.2 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin Community by PeepSo versions 6.3.1.2...

6.1CVSS5.9AI score0.00515EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:5 a.m.•19 views

WordPress EventON < 2.2.8 - Unauthenticated Email Address Disclosure vulnerability

Unauthenticated Email Address Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.8...

5.3CVSS5.9AI score0.37957EPSS

SaveExploits3References1Affected Software1

Patchstack•added 2026/01/30 8:2 a.m.•16 views

WordPress EventON < 4.5.5 - Unauthenticated Email Address Disclosure vulnerability

Unauthenticated Email Address Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 4.5.5...

5.3CVSS5.9AI score0.37957EPSS

SaveExploits3References1Affected Software1

Patchstack•added 2026/01/30 7:49 a.m.•14 views

WordPress EventON plugin < 4.5.9 - Unauthenticated Virtual Event Settings Update vulnerability

Unauthenticated Virtual Event Settings Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 4.5.9...

5.3CVSS5.9AI score0.00411EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:48 a.m.•14 views

WordPress EventON Lite< 2.2.9 - Unauthenticated Virtual Event Settings Update vulnerability

Unauthenticated Virtual Event Settings Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.9...

5.3CVSS5.9AI score0.00411EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:47 a.m.•10 views

WordPress EventON < 2.2.8 - Unauthenticated Virtual Event Password Disclosure vulnerability

Unauthenticated Virtual Event Password Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.8...

5.3CVSS5.9AI score0.00453EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:45 a.m.•13 views

WordPress EventON < 4.5.5 - Unauthenticated Virtual Event Password Disclosure vulnerability

Unauthenticated Virtual Event Password Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 4.5.5...

5.3CVSS5.9AI score0.00453EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:42 a.m.•10 views

WordPress Hunk Companion plugin < 1.9.0 - Unauthenticated Plugin Installation vulnerability

Unauthenticated Plugin Installation vulnerability discovered by Daniel Rodriguez in WordPress Plugin Hunk Companion versions 1.9.0...

9.8CVSS5.9AI score0.54754EPSS

SaveExploits5References1Affected Software1

Patchstack•added 2026/01/30 7:38 a.m.•13 views

WordPress EventON plugin < 4.5.6 - Unauthenticated Arbitrary Post Metadata Update vulnerability

Unauthenticated Arbitrary Post Metadata Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 4.5.6...

6.1CVSS5.9AI score0.00373EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:36 a.m.•18 views

WordPress EventON < 2.2.8 - Unauthenticated Arbitrary Post Metadata Update vulnerability

Unauthenticated Arbitrary Post Metadata Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.8...

6.1CVSS5.9AI score0.00373EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:32 a.m.•7 views

WordPress ConvertForce Popup Builder plugin <= 0.0.7 - Stored Cross-Site Scripting via entrance_animation vulnerability

Stored Cross-Site Scripting via entranceanimation vulnerability discovered by WordFence in WordPress Plugin ConvertForce Popup Builder versions = 0.0.7...

6.4CVSS5.9AI score0.00192EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 7:31 a.m.•10 views

WordPress EventPrime plugin <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API vulnerability

Unauthenticated Sensitive Information Exposure via REST API vulnerability discovered by Deadbee - NA in WordPress Plugin EventPrime versions = 4.2.7.0...

5.3CVSS5.9AI score0.00378EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 7:30 a.m.•9 views

WordPress CAS <= 1.0.0 - Unauthenticated SSRF vulnerability

Unauthenticated SSRF vulnerability discovered by Aly Khaled Aly Abd Al-aal in WordPress Theme Cas versions = 1.0.0...

9.1CVSS5.9AI score0.01821EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 7:30 a.m.•11 views

WordPress Widget Countdown plugin <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Widget Countdown versions = 2.7.7...

6.4CVSS5.9AI score0.00192EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 7:30 a.m.•8 views

WordPress MediaPress plugin <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Plugin's Shortcode vulnerability discovered by zaim in WordPress Plugin MediaPress versions = 1.6.1...

6.4CVSS5.9AI score0.00155EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 7:29 a.m.•13 views

WordPress Amelia plugin <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions vulnerability

Missing Authorization to Unauthenticated Multiple AJAX Actions vulnerability discovered by type5afe in WordPress Plugin Amelia versions = 1.2.38...

5.3CVSS5.9AI score0.0028EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 7:29 a.m.•10 views

WordPress Internal Link Builder plugin <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Settings vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via Plugin's Settings vulnerability discovered by 0x34rth in WordPress Plugin Internal Link Builder versions = 1.0...

4.4CVSS5.9AI score0.0019EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 6:57 a.m.•13 views

WordPress Buttons Shortcode and Widget plugin <= 1.16 - Stored XSS via shortcode vulnerability

Stored XSS via shortcode vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Buttons Shortcode and Widget versions = 1.16...

6.1CVSS5.9AI score0.00413EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 6:51 a.m.•11 views

WordPress coreActivity plugin < 2.1 - Unauthenticated IP Spoofing vulnerability

Unauthenticated IP Spoofing vulnerability discovered by Erwan LR WPScan in WordPress Plugin coreActivity: Activity Logging plugin for WordPress versions 2.1...

5.3CVSS5.9AI score0.00482EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 6:45 a.m.•9 views

WordPress ProfilePress plugin < 4.15.15 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin ProfilePress versions 4.15.15...

4.8CVSS5.9AI score0.0034EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 6:24 a.m.•10 views

WordPress CAS <= 1.0.0 - Unauthenticated Arbitrary File Access vulnerability

Unauthenticated Arbitrary File Access vulnerability discovered by Aly Khaled Aly Abd Al-aal in WordPress Theme Cas versions = 1.0.0...

7.5CVSS5.9AI score0.00719EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 6:24 a.m.•9 views

WordPress Photo Gallery by 10Web plugin < 1.8.31 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Photo Gallery by 10Web versions 1.8.31...

4.8CVSS5.9AI score0.00369EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 6:22 a.m.•8 views

WordPress profile-builder plugin < 3.11.9 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by John Castro in WordPress Plugin Profile Builder versions 3.11.9...

9.8CVSS5.9AI score0.00796EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 6:22 a.m.•8 views

WordPress WP Booking Calendar plugin < 10.6.5 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Booking Calendar versions 10.6.5...

4.8CVSS5.9AI score0.00303EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 6:21 a.m.•12 views

WordPress Favicon Generator plugin < 2.1 - Arbitrary File Deletion via CSRF vulnerability

Arbitrary File Deletion via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Favicon Generator versions 2.1...

6.5CVSS5.9AI score0.00245EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 6:16 a.m.•10 views

WordPress Element Pack Elementor Addons plugin < 5.10.3 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Element Pack Elementor Addons versions 5.10.3...

5.4CVSS5.9AI score0.00349EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 5:52 a.m.•15 views

WordPress CubeWP plugin <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php vulnerability

Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php vulnerability discovered by stealthcopter in WordPress Plugin CubeWP versions = 1.1.27...

4.3CVSS5.9AI score0.00196EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 5:32 a.m.•8 views

WordPress Kadence Blocks plugin <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.2.53...

4.8CVSS5.9AI score0.0046EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 5:6 a.m.•11 views

WordPress Paid Memberships Pro plugin < 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure vulnerability

Contributor+ Arbitrary User Custom Field Disclosure vulnerability discovered by Scott Kingsley Clark in WordPress Plugin Paid Memberships Pro versions 2.12.9...

4.3CVSS5.9AI score0.00548EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 4:17 a.m.•12 views

WordPress CubeWP plugin <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via cubewpshortcodetaxonomy Shortcode vulnerability discovered by zaim in WordPress Plugin CubeWP versions = 1.1.26...

6.4CVSS5.9AI score0.00185EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 3:52 a.m.•9 views

WordPress Serious Slider plugin <= 1.2.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Serious Slider versions = 1.2.7...

4.3CVSS5.4AI score0.0024EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/01/30 3:42 a.m.•7 views

WordPress HL Twitter plugin <= 2014.1.18 - Unlink Twitter Account via CSRF vulnerability

Unlink Twitter Account via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin HL Twitter versions = 2014.1.18...

4.3CVSS5.9AI score0.00211EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 3:40 a.m.•12 views

WordPress Newsletter Popup plugin <= 1.2 - Subscriber Deletion via CSRF vulnerability

Subscriber Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Newsletter Popup versions = 1.2...

6.9CVSS5.9AI score0.00254EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 3:40 a.m.•10 views

WordPress Newsletter Popup plugin <= 1.2 - List Deletion via CSRF vulnerability

List Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Newsletter Popup versions = 1.2...

8.8CVSS5.9AI score0.00347EPSS

SaveExploits3References1Affected Software1

Patchstack•added 2026/01/30 3:37 a.m.•10 views

WordPress SendPress Newsletters plugin <= 1.23.11.6 - Admin+ Stored XSS via Settings vulnerability

Admin+ Stored XSS via Settings vulnerability discovered by Manab Jyoti Dowarah in WordPress Plugin SendPress Newsletters versions = 1.23.11.6...

6.8CVSS5.9AI score0.0071EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 3:35 a.m.•15 views

WordPress SendPress Newsletters plugin <= 1.23.11.6 - Admin+ Stored XSS via Form Settings vulnerability

Admin+ Stored XSS via Form Settings vulnerability discovered by Manab Jyoti Dowarah in WordPress Plugin SendPress Newsletters versions = 1.23.11.6...

6.1CVSS5.9AI score0.00405EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 3:10 a.m.•10 views

WordPress Pet Manager plugin <= 1.4 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Pet Manager versions = 1.4...

4.8CVSS5.9AI score0.00351EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 3:8 a.m.•12 views

WordPress WooCommerce Customers Manager plugin < 30.1 - Bulk Action via CSRF vulnerability

Bulk Action via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WooCommerce Customers Manager versions 30.1...

8.1CVSS5.9AI score0.00312EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 2:27 a.m.•11 views

WordPress WP Logs Book plugin <= 1.0.1 - Log Clearing via CSRF vulnerability

Log Clearing via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Logs Book versions = 1.0.1...

4.3CVSS5.9AI score0.00183EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 2:26 a.m.•9 views

WordPress Business Card plugin <= 1.0.0 - Card Edit via CSRF vulnerability

Card Edit via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Business Card versions = 1.0.0...

7.1CVSS5.9AI score0.0025EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 2:26 a.m.•10 views

WordPress Business Card plugin <= 1.0.0 - Card Edit via CSRF vulnerability

Card Edit via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Business Card versions = 1.0.0...

7.1CVSS5.9AI score0.0025EPSS

SaveExploits2References1Affected Software1

Total number of security vulnerabilities47982