Patchstack - Page 157 of Patchstack Vulnerabilities List

PatchstackRecent

50149 matches found

Patchstack•added 2026/02/01 5:54 a.m.•21 views

WordPress Quiz And Survey Master plugin <= 10.3.4 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by johska in WordPress Plugin Quiz And Survey Master versions = 10.3.4...

5.3CVSS5.5AI score0.00315EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/01/30 11:54 p.m.•15 views

WordPress SupportCandy - Helpdesk & Customer Support Ticket System plugin <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability

WordPress SupportCandy - Helpdesk & Customer Support Ticket System plugin = 3.4.4 - Authenticated Subscriber+ Insecure Direct Object Reference vulnerability discovered by Theklis - Sentrium Security Ltd in WordPress Plugin SupportCandy versions = 3.4.4...

5.4CVSS5.9AI score0.00289EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 10:49 p.m.•20 views

WordPress Ajax Load More - Infinite Scroll, Lazy Load & Load More plugin <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure vulnerability

WordPress Ajax Load More - Infinite Scroll, Lazy Load & Load More plugin = 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure vulnerability discovered by shark3y in WordPress Plugin Ajax Load More versions = 7.8.1...

5.3CVSS5.9AI score0.00274EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 10:00 p.m.•14 views

WordPress Booking Calendar plugin <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposure vulnerability

Missing Authorization to Unauthenticated Booking Details Exposure vulnerability discovered by type5afe in WordPress Plugin Booking Calendar versions = 10.14.13...

5.3CVSS5.9AI score0.00274EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 9:58 p.m.•17 views

WordPress NEX-Forms - Ultimate Forms Plugin for WordPress plugin <= 9.1.8 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

WordPress NEX-Forms - Ultimate Forms Plugin for WordPress plugin = 9.1.8 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Deadbee - NA in WordPress Plugin NEX-Forms versions = 9.1.8...

5.3CVSS5.9AI score0.00296EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 9:00 p.m.•15 views

WordPress Mizan Demo Importer plugin <= 0.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Mizan Demo Importer versions = 0.1.3...

5.4CVSS5.3AI score0.00176EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/01/30 7:04 p.m.•16 views

WordPress WP Sync for Notion plugin <= 1.7.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WP Sync for Notion versions = 1.7.0...

4.3CVSS5.3AI score0.00158EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/01/30 6:44 p.m.•17 views

WordPress Atarim plugin <= 4.3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Atarim versions = 4.3.1...

5.3CVSS5.3AI score0.00177EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/01/30 6:37 p.m.•9 views

WordPress WP Wand plugin <= 1.3.07 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WP Wand versions = 1.3.07...

5.4CVSS5.4AI score0.00209EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/01/30 4:12 p.m.•22 views

WordPress Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress plugin <= 1.4.0 - Open Redirection vulnerability

Open Redirection vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Update URLs Quick and Easy way to search old links and replace them with new links in WordPress versions = 1.4.1...

4.7CVSS5.4AI score0.00201EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/01/30 2:27 p.m.•14 views

WordPress Hello FSE theme <= 1.0.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Theme Hello FSE versions = 1.0.6...

4.3CVSS5.4AI score0.00185EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/01/30 2:24 p.m.•14 views

WordPress Fitness FSE theme <= 1.0.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Theme Fitness FSE versions = 1.0.6...

4.3CVSS5.4AI score0.00185EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/01/30 2:10 p.m.•13 views

WordPress Business Roy theme <= 1.1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Theme Business Roy versions = 1.1.4...

4.3CVSS5.4AI score0.00243EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/01/30 9:40 a.m.•19 views

WordPress Himer theme < 2.1.3 - CSRF While Sending the Invites

CSRF While Sending the Invites vulnerability discovered by Sushmita Poudel in WordPress Theme Himer versions 2.1.3...

8.1CVSS5.9AI score0.00277EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 9:38 a.m.•16 views

WordPress EventON Lite < 2.2.8 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.8...

6.1CVSS5.9AI score0.00366EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 9:38 a.m.•18 views

WordPress EventON < 4.5.5 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 4.5.5...

6.1CVSS5.9AI score0.00366EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 9:35 a.m.•18 views

WordPress Custom Login Page Customizer plugin < 2.5.4 - Unauthenticated Arbitrary Password Reset vulnerability

Unauthenticated Arbitrary Password Reset vulnerability discovered by Drew Webber mcdruid in WordPress Plugin Custom Login Page Customizer versions 2.5.4...

8.1CVSS5.9AI score0.00319EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 9:00 a.m.•17 views

WordPress Himer theme < 2.1.1 - Bypass Poll Voting Restrictions via CSRF vulnerability

Bypass Poll Voting Restrictions via CSRF vulnerability discovered by Sushmita Poudel in WordPress Theme Himer versions 2.1.1...

6.3CVSS5.9AI score0.00193EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:57 a.m.•21 views

WordPress The Ultimate Video Player For WordPress plugin < 2.2.3 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Presto Player versions 2.2.3...

4.7CVSS5.9AI score0.00495EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:43 a.m.•14 views

WordPress VikBooking plugin < 1.6.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by cyc707 in WordPress Plugin VikBooking Hotel Booking Engine & PMS versions 1.6.8...

5.9CVSS5.9AI score0.0028EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:41 a.m.•17 views

WordPress Genesis Blocks plugin < 3.1.3 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Genesis Blocks versions 3.1.3...

6.8CVSS5.9AI score0.00665EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:26 a.m.•17 views

WordPress Tutor LMS plugin <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Course Completion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Course Completion vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Tutor LMS versions = 3.9.2...

4.3CVSS5.9AI score0.00223EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 8:25 a.m.•17 views

WordPress PostX plugin < 4.0.2 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin PostX versions 4.0.2...

5.4CVSS5.9AI score0.00416EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:24 a.m.•18 views

WordPress All in One SEO plugin < 4.6.1.1 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmtirii Ignatyev in WordPress Plugin All In One SEO Pack versions 4.6.1.1...

6.1CVSS5.9AI score0.00369EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:24 a.m.•15 views

WordPress WP Prayer plugin <= 2.0.9 - Email Settings Update via CSRF vulnerability

Email Settings Update via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Prayer versions = 2.0.9...

8.8CVSS5.9AI score0.00347EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:23 a.m.•15 views

WordPress WP Prayer plugin <= 2.0.9 - Arbitrary Prayer Deletion via CSRF vulnerability

Arbitrary Prayer Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Prayer versions = 2.0.9...

5.3CVSS5.9AI score0.00189EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:14 a.m.•16 views

WordPress Community by PeepSo plugin < 6.3.1.2 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin Community by PeepSo versions 6.3.1.2...

6.1CVSS5.9AI score0.00515EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 8:05 a.m.•23 views

WordPress EventON < 2.2.8 - Unauthenticated Email Address Disclosure vulnerability

Unauthenticated Email Address Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.8...

5.3CVSS5.9AI score0.37957EPSS

SaveExploits3References1Affected Software1

Patchstack•added 2026/01/30 8:02 a.m.•20 views

WordPress EventON < 4.5.5 - Unauthenticated Email Address Disclosure vulnerability

Unauthenticated Email Address Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 4.5.5...

5.3CVSS5.9AI score0.37957EPSS

SaveExploits3References1Affected Software1

Patchstack•added 2026/01/30 7:49 a.m.•21 views

WordPress EventON plugin < 4.5.9 - Unauthenticated Virtual Event Settings Update vulnerability

Unauthenticated Virtual Event Settings Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 4.5.9...

5.3CVSS5.9AI score0.00411EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:48 a.m.•18 views

WordPress EventON Lite< 2.2.9 - Unauthenticated Virtual Event Settings Update vulnerability

Unauthenticated Virtual Event Settings Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.9...

5.3CVSS5.9AI score0.00411EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:47 a.m.•17 views

WordPress EventON < 2.2.8 - Unauthenticated Virtual Event Password Disclosure vulnerability

Unauthenticated Virtual Event Password Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.8...

5.3CVSS5.9AI score0.00453EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:45 a.m.•20 views

WordPress EventON < 4.5.5 - Unauthenticated Virtual Event Password Disclosure vulnerability

Unauthenticated Virtual Event Password Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 4.5.5...

5.3CVSS5.9AI score0.00453EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:42 a.m.•14 views

WordPress Hunk Companion plugin < 1.9.0 - Unauthenticated Plugin Installation vulnerability

Unauthenticated Plugin Installation vulnerability discovered by Daniel Rodriguez in WordPress Plugin Hunk Companion versions 1.9.0...

9.8CVSS5.9AI score0.54475EPSS

SaveExploits5References1Affected Software1

Patchstack•added 2026/01/30 7:38 a.m.•18 views

WordPress EventON plugin < 4.5.6 - Unauthenticated Arbitrary Post Metadata Update vulnerability

Unauthenticated Arbitrary Post Metadata Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 4.5.6...

6.1CVSS5.9AI score0.00373EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:36 a.m.•23 views

WordPress EventON < 2.2.8 - Unauthenticated Arbitrary Post Metadata Update vulnerability

Unauthenticated Arbitrary Post Metadata Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.8...

6.1CVSS5.9AI score0.00373EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 7:32 a.m.•13 views

WordPress ConvertForce Popup Builder plugin <= 0.0.7 - Stored Cross-Site Scripting via entrance_animation vulnerability

Stored Cross-Site Scripting via entranceanimation vulnerability discovered by WordFence in WordPress Plugin ConvertForce Popup Builder versions = 0.0.7...

6.4CVSS5.9AI score0.00218EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 7:31 a.m.•15 views

WordPress EventPrime plugin <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API vulnerability

Unauthenticated Sensitive Information Exposure via REST API vulnerability discovered by Deadbee - NA in WordPress Plugin EventPrime versions = 4.2.7.0...

5.3CVSS5.9AI score0.00426EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 7:30 a.m.•14 views

WordPress CAS <= 1.0.0 - Unauthenticated SSRF vulnerability

Unauthenticated SSRF vulnerability discovered by Aly Khaled Aly Abd Al-aal in WordPress Theme Cas versions = 1.0.0...

9.1CVSS5.9AI score0.01821EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 7:30 a.m.•13 views

WordPress Widget Countdown plugin <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Widget Countdown versions = 2.7.7...

6.4CVSS5.9AI score0.00218EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 7:30 a.m.•14 views

WordPress MediaPress plugin <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Plugin's Shortcode vulnerability discovered by zaim in WordPress Plugin MediaPress versions = 1.6.1...

6.4CVSS5.9AI score0.00176EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 7:29 a.m.•20 views

WordPress Amelia plugin <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions vulnerability

Missing Authorization to Unauthenticated Multiple AJAX Actions vulnerability discovered by type5afe in WordPress Plugin Amelia versions = 1.2.38...

5.3CVSS5.9AI score0.00316EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 7:29 a.m.•15 views

WordPress Internal Link Builder plugin <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Settings vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via Plugin's Settings vulnerability discovered by 0x34rth in WordPress Plugin Internal Link Builder versions = 1.0...

4.4CVSS5.9AI score0.00221EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/01/30 6:57 a.m.•17 views

WordPress Buttons Shortcode and Widget plugin <= 1.16 - Stored XSS via shortcode vulnerability

Stored XSS via shortcode vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Buttons Shortcode and Widget versions = 1.16...

6.1CVSS5.9AI score0.00413EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 6:51 a.m.•13 views

WordPress coreActivity plugin < 2.1 - Unauthenticated IP Spoofing vulnerability

Unauthenticated IP Spoofing vulnerability discovered by Erwan LR WPScan in WordPress Plugin coreActivity: Activity Logging plugin for WordPress versions 2.1...

5.3CVSS5.9AI score0.00482EPSS

SaveExploits2References1Affected Software1

Patchstack•added 2026/01/30 6:45 a.m.•14 views

WordPress ProfilePress plugin < 4.15.15 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin ProfilePress versions 4.15.15...

4.8CVSS5.9AI score0.0034EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 6:24 a.m.•15 views

WordPress CAS <= 1.0.0 - Unauthenticated Arbitrary File Access vulnerability

Unauthenticated Arbitrary File Access vulnerability discovered by Aly Khaled Aly Abd Al-aal in WordPress Theme Cas versions = 1.0.0...

7.5CVSS5.9AI score0.00719EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 6:24 a.m.•14 views

WordPress Photo Gallery by 10Web plugin < 1.8.31 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Photo Gallery by 10Web versions 1.8.31...

4.8CVSS5.9AI score0.00379EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 6:22 a.m.•13 views

WordPress profile-builder plugin < 3.11.9 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by John Castro in WordPress Plugin Profile Builder versions 3.11.9...

9.8CVSS5.9AI score0.00796EPSS

SaveExploits1References1Affected Software1

Patchstack•added 2026/01/30 6:22 a.m.•12 views

WordPress WP Booking Calendar plugin < 10.6.5 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Booking Calendar versions 10.6.5...

4.8CVSS5.9AI score0.00312EPSS

SaveExploits1References1Affected Software1

Total number of security vulnerabilities50149