Patchstack - Page 119 of Patchstack Vulnerabilities List

PatchstackRecent

49938 matches found

Patchstack•added 2026/03/23 4:32 p.m.•17 views

WordPress Sheets2Table plugin <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titles' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'titles' Shortcode Attribute vulnerability discovered by Gilang - DJ in WordPress Plugin Sheets2Table versions = 0.4.1...

6.4CVSS5.8AI score0.00193EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/03/23 4:32 p.m.•14 views

WordPress fyyd podcast shortcodes plugin <= 0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'color' Shortcode Attribute vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin fyyd podcast shortcodes versions = 0.3.1...

6.4CVSS5.8AI score0.0025EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/03/23 4:31 p.m.•16 views

WordPress Show Posts list plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Show Posts list versions = 1.1.0...

6.4CVSS5.8AI score0.00235EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/03/23 4:26 p.m.•13 views

WordPress Ad Short plugin <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'client' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'client' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin Ad Short versions = 2.0.1...

6.4CVSS5.8AI score0.00188EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/03/23 4:24 p.m.•13 views

WordPress WP Random Button plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cat' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'cat' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin WP Random Button versions = 1.0...

6.4CVSS5.8AI score0.00193EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/03/23 4:00 p.m.•15 views

WordPress login_register plugin <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin loginregister versions = 1.2.0...

4.3CVSS5.8AI score0.00145EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/03/23 3:35 p.m.•16 views

WordPress Ecover Builder For Dummies plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin Ecover Builder For Dummies versions = 1.0...

6.4CVSS5.8AI score0.00201EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/03/23 3:26 p.m.•24 views

WordPress WP REST Cache plugin <= 2026.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin WP REST Cache versions = 2026.1.0...

7.1CVSS5.8AI score0.00175EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 3:21 p.m.•15 views

WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by 0xd4rk5id3 in WordPress Plugin User Registration versions = 4.4.9...

8.1CVSS5.8AI score0.00345EPSS

SaveExploits1Affected Software1

Patchstack•added 2026/03/23 3:10 p.m.•15 views

WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin Element Pack Elementor Addons versions = 8.4.2...

7.6CVSS6AI score0.00236EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 3:03 p.m.•16 views

WordPress WPBookit Pro plugin <= 1.6.18 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Phat RiO in WordPress Plugin WPBookit Pro versions = 1.6.18...

9.9CVSS5.8AI score0.00328EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 3:01 p.m.•13 views

WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin ProfileGrid versions = 5.9.8.1...

6.5CVSS5.8AI score0.00156EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:56 p.m.•18 views

WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by daroo in WordPress Plugin JetFormBuilder versions = 3.5.6.1...

9.9CVSS5.9AI score0.00294EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:51 p.m.•14 views

WordPress WP Courses LMS plugin <= 3.2.26 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Duc Canh canhnguyen26 in WordPress Plugin WP Courses LMS versions = 3.2.26...

6.5CVSS5.8AI score0.00156EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:48 p.m.•16 views

WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by huli07 in WordPress Plugin Contact Form Email versions = 1.3.63...

6.5CVSS5.8AI score0.00296EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:48 p.m.•18 views

WordPress PPWP plugin <= 1.9.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Doan Dinh Van in WordPress Plugin PPWP versions = 1.9.15...

5.4CVSS5.8AI score0.00131EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:47 p.m.•26 views

WordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin WP Cost Estimation & Payment Forms Builder versions 10.3.0...

7.5CVSS5.8AI score0.00377EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:43 p.m.•16 views

WordPress Tutor LMS Pro plugin <= 3.9.4 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Phat RiO in WordPress Plugin Tutor LMS Pro versions = 3.9.4...

8.8CVSS5.8AI score0.00342EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:40 p.m.•17 views

WordPress Car Dealer theme <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Car Dealer versions = 1.6.7...

7.1CVSS5.8AI score0.00175EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:38 p.m.•16 views

WordPress The Grid plugin < 2.8.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin The Grid versions 2.8.0...

7.1CVSS5.8AI score0.00307EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:38 p.m.•29 views

WordPress Vertex Addons for Elementor plugin <= 1.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by theviper17 in WordPress Plugin Vertex Addons for Elementor versions = 1.6.4...

6.5CVSS5.8AI score0.00293EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:37 p.m.•12 views

WordPress Commerce Coinbase For WooCommerce plugin <= 1.6.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Commerce Coinbase For WooCommerce versions = 1.6.6...

7.5CVSS5.8AI score0.00262EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:36 p.m.•13 views

WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability

Email Verification Bypass vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin User Verification versions = 2.0.45...

5.3CVSS5.8AI score0.00221EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:35 p.m.•17 views

WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin weForms versions = 1.6.26...

8.8CVSS5.8AI score0.0028EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:31 p.m.•11 views

WordPress WP TripAdvisor Review Slider plugin <= 14.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Doan Dinh Van in WordPress Plugin WP TripAdvisor Review Slider versions = 14.1...

6.5CVSS5.8AI score0.00156EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:29 p.m.•16 views

WordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by PPzzAArr in WordPress Plugin Booking and Rental Manager versions = 2.6.0...

6.5CVSS5.8AI score0.00305EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:28 p.m.•11 views

WordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by johska in WordPress Plugin Five Star Restaurant Reservations versions = 2.7.9...

6.5CVSS5.8AI score0.00209EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:25 p.m.•15 views

WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Contact Form & Lead Form Elementor Builder versions = 2.0.1...

7.1CVSS5.8AI score0.00142EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:19 p.m.•16 views

WordPress VK All in One Expansion Unit plugin <= 9.113.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by timomangcut in WordPress Plugin VK All in One Expansion Unit versions = 9.113.3...

6.5CVSS5.9AI score0.00156EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:18 p.m.•17 views

WordPress Nelio AB Testing plugin <= 8.2.7 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by daroo in WordPress Plugin Nelio AB Testing versions = 8.2.7...

9.1CVSS5.9AI score0.00297EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:15 p.m.•15 views

WordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by CidKagenouSama in WordPress Plugin Contact Form by WPForms versions = 1.9.8.7...

6.5CVSS5.8AI score0.00234EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 2:15 p.m.•17 views

WordPress Contest Gallery plugin <= 28.1.2.2 - Account Takeover vulnerability

Account Takeover vulnerability discovered by daroo in WordPress Plugin Contest Gallery versions = 28.1.2.2...

9.8CVSS5.8AI score0.00416EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:57 p.m.•16 views

WordPress Ultimate Membership Pro plugin <= 13.7 - Account Takeover vulnerability

Account Takeover vulnerability discovered by Phat RiO in WordPress Plugin Ultimate Membership Pro versions = 13.7...

8.1CVSS5.8AI score0.00342EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:41 p.m.•14 views

WordPress The Grid plugin < 2.8.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Phat RiO in WordPress Plugin The Grid versions 2.8.0...

6.5CVSS5.8AI score0.00205EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:39 p.m.•19 views

WordPress File Uploader for WooCommerce plugin <= 1.0.4 - Path Traversal vulnerability

Path Traversal vulnerability discovered by johska in WordPress Plugin File Uploader for WooCommerce versions = 1.0.4...

7.5CVSS5.8AI score0.00431EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:36 p.m.•13 views

WordPress Golo theme < 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Golo versions 1.7.5...

7.1CVSS5.8AI score0.0018EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:35 p.m.•17 views

WordPress ElementInvader Addons for Elementor plugin <= 1.4.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nabil Irawan in WordPress Plugin ElementInvader Addons for Elementor versions = 1.4.2...

8.5CVSS5.9AI score0.00253EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:32 p.m.•15 views

WordPress WPBookit Pro plugin <= 1.6.18 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Phat RiO in WordPress Plugin WPBookit Pro versions = 1.6.18...

8.8CVSS5.8AI score0.00286EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:30 p.m.•13 views

WordPress Ona theme < 1.24 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Phat RiO in WordPress Theme Ona versions 1.24...

9.9CVSS5.8AI score0.00319EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:28 p.m.•16 views

WordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by w41bu1 in WordPress Plugin B Blocks versions 2.0.30...

6.5CVSS5.8AI score0.00235EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:27 p.m.•17 views

WordPress Apicona theme <= 24.1.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Apicona versions = 24.1.0...

8.8CVSS5.8AI score0.00344EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:26 p.m.•10 views

WordPress NaturaLife Extensions plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin NaturaLife Extensions versions = 2.1...

7.1CVSS5.8AI score0.00175EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:26 p.m.•14 views

WordPress NaturaLife Extensions plugin <= 2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin NaturaLife Extensions versions = 2.1...

8.1CVSS5.8AI score0.00403EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:25 p.m.•23 views

WordPress WPCargo Track & Trace plugin <= 8.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WPCargo Track & Trace versions = 8.0.2...

7.5CVSS5.8AI score0.00278EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:22 p.m.•14 views

WordPress Sanzo theme < 2.4.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Sanzo versions 2.4.3...

6.5CVSS5.8AI score0.00156EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:20 p.m.•14 views

WordPress JobSearch plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Phat RiO in WordPress Plugin JobSearch versions = 3.2.0...

5.8AI score0.00175EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:18 p.m.•11 views

WordPress WP Review Slider plugin <= 13.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Doan Dinh Van in WordPress Plugin WP Review Slider versions = 13.9...

6.5CVSS5.8AI score0.00156EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:16 p.m.•12 views

WordPress Vayvo - Media Streaming & Membership WordPress Theme theme < 6.8 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Vayvo - Media Streaming & Membership WordPress Theme theme 6.8 - Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Vayvo versions 6.8...

7.1CVSS5.8AI score0.00175EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:15 p.m.•13 views

WordPress Addon Jobsearch Chat plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Phat RiO in WordPress Plugin Addon Jobsearch Chat versions = 3.0...

7.1CVSS5.8AI score0.00175EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/03/23 1:14 p.m.•12 views

WordPress KiviCare plugin <= 3.6.16 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin KiviCare versions = 3.6.16...

7.1CVSS5.8AI score0.00175EPSS

SaveExploits0Affected Software1

Total number of security vulnerabilities49938