Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
PatchstackRecent
RecentMost viewed

48113 matches found

Patchstack
Patchstack•added 2025/12/30 11:7 a.m.•9 views

WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Overworld versions = 1.3...

8.1CVSS7AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 11:6 a.m.•8 views

WordPress Töbel theme <= 1.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Töbel versions = 1.6...

8.1CVSS7AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 11:5 a.m.•10 views

WordPress MaxShop theme <= 3.6.20 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme MaxShop versions = 3.6.20...

8.1CVSS7AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 11:3 a.m.•8 views

WordPress iRecco Core plugin <= 1.3.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin iRecco Core versions = 1.3.6...

8.1CVSS7AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:58 a.m.•7 views

WordPress FooEvents for WooCommerce plugin <= 1.20.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin FooEvents for WooCommerce versions = 1.20.4...

8.5CVSS8.1AI score0.0033EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:46 a.m.•6 views

WordPress Vango theme <= 1.3.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Vango versions = 1.3.3...

8.1CVSS7.1AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:45 a.m.•6 views

WordPress Rashy theme <= 1.1.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Rashy versions = 1.1.3...

8.2CVSS7.1AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:45 a.m.•8 views

WordPress Lindo theme <= 1.2.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Lindo versions = 1.2.5...

8.2CVSS7.1AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:45 a.m.•7 views

WordPress Dekoro theme <= 1.0.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Dekoro versions = 1.0.7...

8.1CVSS7.1AI score0.00512EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:44 a.m.•8 views

WordPress Bfres theme <= 1.2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Bfres versions = 1.2.1...

8.2CVSS7.1AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:44 a.m.•7 views

WordPress Bailly theme <= 1.3.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Bailly versions = 1.3.4...

8.1CVSS7.1AI score0.00512EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:44 a.m.•6 views

WordPress Hyori theme <= 1.3.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Hyori versions = 1.3.6...

8.1CVSS7.1AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:44 a.m.•6 views

WordPress Pippo theme <= 1.2.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - BlueRock in WordPress Theme Pippo versions = 1.2.3...

8.1CVSS7.1AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:42 a.m.•10 views

WordPress Tech Life CPT plugin <= 16.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Tech Life CPT versions = 16.4...

8.8CVSS7.3AI score0.00344EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:41 a.m.•9 views

WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan - Blue Rock in WordPress Plugin Sunshine Photo Cart versions = 3.5.7.1...

9.1CVSS7AI score0.00165EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:39 a.m.•12 views

WordPress Dental Care CPT plugin <= 20.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Dental Care CPT versions = 20.2...

8.8CVSS7.3AI score0.00344EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 10:19 a.m.•9 views

WordPress Lekker theme <= 1.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Lekker versions = 1.8...

8.1CVSS7AI score0.0034EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 9:45 a.m.•8 views

WordPress Team Showcase plugin <= 2.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Team Showcase versions = 2.9...

5.4CVSS6.1AI score0.00135EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 8:43 a.m.•10 views

WordPress Simple XML Sitemap plugin <= 1.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Skalucy in WordPress Plugin Simple XML Sitemap versions = 1.3...

7.1CVSS6.2AI score0.0012EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 8:33 a.m.•14 views

WordPress Advance WP Query Search Filter plugin <= 1.0.10 - Reflected XSS via taxo_ajax vulnerability

Reflected XSS via taxoajax vulnerability discovered by Yevgen Goncharuk in WordPress Plugin Advance WP Query Search Filter versions = 1.0.10...

6.1CVSS6AI score0.00155EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/30 8:32 a.m.•14 views

WordPress Advance WP Query Search Filter plugin <= 1.0.10 - Reflected XSS via counter vulnerability

Reflected XSS via counter vulnerability discovered by Yevgen Goncharuk in WordPress Plugin Advance WP Query Search Filter versions = 1.0.10...

6.1CVSS6AI score0.00155EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/30 8:9 a.m.•10 views

WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Free Shipping Bar: Amount Left for Free Shipping for WooCommerce versions = 2.4.9...

5.4CVSS6.1AI score0.0014EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 8:8 a.m.•10 views

WordPress AweBooking plugin <= 3.2.26 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by NumeX in WordPress Plugin AweBooking versions = 3.2.26...

6.5CVSS7AI score0.00227EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 8:5 a.m.•10 views

WordPress Sell Downloads plugin <= 1.1.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin Sell Downloads versions = 1.1.12...

7.5CVSS6.8AI score0.00241EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 7:58 a.m.•11 views

WordPress Payment Gateway Authorize.Net CIM for WooCommerce plugin <= 2.1.2 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Payment Gateway Authorize.Net CIM for WooCommerce versions = 2.1.2...

6.5CVSS7AI score0.00392EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 7:58 a.m.•7 views

WordPress CodeColorer plugin <= 0.10.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin CodeColorer versions = 0.10.1...

7.1CVSS5.8AI score0.0023EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 7:54 a.m.•11 views

WordPress WP-BusinessDirectory plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP-BusinessDirectory versions = 4.0.0...

7.1CVSS5.2AI score0.00197EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 7:21 a.m.•9 views

WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Wishlist for WooCommerce versions = 3.3.0...

6.5CVSS6.1AI score0.00135EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 7:8 a.m.•12 views

WordPress teachPress plugin <= 9.0.12 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin teachPress versions = 9.0.12...

6.5CVSS6.1AI score0.00161EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 6:15 a.m.•9 views

WordPress Pinpoll plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Pinpoll versions = 4.0.0...

7.1CVSS6.1AI score0.00197EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 6:14 a.m.•12 views

WordPress e-shops plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin e-shops versions = 1.0.4...

6.1CVSS6.1AI score0.00152EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 6:10 a.m.•6 views

WordPress Strong Testimonials plugin <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update vulnerability

Missing Authorization to Authenticated Contributor+ Rating Meta Update vulnerability discovered by type5afe in WordPress Plugin Strong Testimonials versions = 3.2.18...

4.3CVSS6.7AI score0.00204EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/30 6:6 a.m.•8 views

WordPress Lucky Wheel for WooCommerce – Spin a Sale plugin <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags vulnerability

Authenticated Administrator+ PHP Code Injection via Conditional Tags vulnerability discovered by Nguyen Truong Roll - FPT IS in WordPress Plugin Lucky Wheel for WooCommerce – Spin a Sale versions = 1.1.13...

7.2CVSS7.2AI score0.00562EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2025/12/30 5:45 a.m.•10 views

WordPress JetTabs plugin <= 2.2.12 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin JetTabs versions = 2.2.12...

6.5CVSS6.1AI score0.00135EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 5:45 a.m.•7 views

WordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin JetTabs versions = 2.2.12...

6.5CVSS7AI score0.00208EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 5:43 a.m.•13 views

WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin JetSearch versions = 3.5.16...

6.5CVSS6.1AI score0.00178EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 5:41 a.m.•7 views

WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin JetBlog versions = 2.4.7...

6.5CVSS7AI score0.00274EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 5:40 a.m.•10 views

WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Bonds in WordPress Plugin JetPopup versions = 2.0.20.1...

4.3CVSS7AI score0.0024EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 5:20 a.m.•11 views

WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin JetElements For Elementor versions = 2.7.12.2...

6.5CVSS5.3AI score0.00161EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 5:17 a.m.•6 views

WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin JetEngine versions = 3.8.1.1...

4.3CVSS7AI score0.00168EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 2:59 a.m.•7 views

WordPress WpStream plugin <= 4.9.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan - Blue Rock in WordPress Plugin WpStream versions = 4.9.5...

8.8CVSS7AI score0.00175EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 2:14 a.m.•12 views

WordPress Menu In Post plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Menu In Post versions = 1.4.1...

5.4CVSS5.3AI score0.00161EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 1:55 a.m.•11 views

WordPress Civic Cookie Control plugin <= 1.53 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Civic Cookie Control versions = 1.53...

5.3CVSS7AI score0.00214EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 1:49 a.m.•10 views

WordPress Carousel Horizontal Posts Content Slider plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Carousel Horizontal Posts Content Slider versions = 3.3.2...

6.5CVSS6.1AI score0.00161EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 1:21 a.m.•20 views

WordPress Auto Listings plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Auto Listings versions = 2.7.1...

6.5CVSS6.1AI score0.00132EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 1:9 a.m.•12 views

WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Academy LMS versions = 3.4.0...

5.4CVSS6.1AI score0.0014EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/30 12:30 a.m.•9 views

WordPress Combo Offers WooCommerce plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Combo Offers WooCommerce versions = 4.2...

6.5CVSS6.1AI score0.0014EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/29 11:28 p.m.•5 views

WordPress Blog Filter plugin <= 1.7.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Blog Filter versions = 1.7.3...

6.5CVSS6.1AI score0.00132EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/29 4:11 p.m.•10 views

WordPress FiveStar theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme FiveStar versions = 1.7...

5.4CVSS7AI score0.00193EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/12/29 3:59 p.m.•7 views

WordPress Arcane theme <= 3.6.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Arcane versions = 3.6.6...

5.3CVSS7AI score0.00244EPSS
SaveExploits0Affected Software1
Total number of security vulnerabilities48113