Patchstack - Page 174 of Patchstack Vulnerabilities List

PatchstackRecent

53008 matches found

Patchstack•added 2026/04/09 9:44 p.m.•23 views

WordPress Advanced CF7 DB plugin <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export vulnerability

Missing Authorization to Authenticated Subscriber+ Form Submissions Excel Export vulnerability discovered by Kai Aizen in WordPress Plugin Advanced Contact form 7 DB versions = 2.0.9...

4.3CVSS5.9AI score0.00303EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/04/09 9:40 p.m.•32 views

WordPress Page Builder: Pagelayer plugin <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Button Widget Custom Attributes vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin PageLayer versions = 2.0.8...

6.4CVSS5.9AI score0.00345EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/04/09 9:39 p.m.•25 views

WordPress BEAR - Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion vulnerability

WordPress BEAR - Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin = 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin BEAR versions = 1.1.5...

4.3CVSS5.9AI score0.00156EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/04/09 9:38 p.m.•22 views

WordPress BEAR - Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification vulnerability

WordPress BEAR - Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin = 1.1.5 - Cross-Site Request Forgery to Product Data Modification vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin BEAR versions = 1.1.5...

6.5CVSS5.8AI score0.00176EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/04/09 8:54 p.m.•20 views

WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by raihan adi arba in WordPress Plugin User Registration versions = 5.1.5...

7.1CVSS5.1AI score0.00149EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/09 6:38 p.m.•23 views

WordPress Beaver Builder Page Builder - Drag and Drop Website Builder plugin <= 2.10.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'settings[js]' vulnerability

WordPress Beaver Builder Page Builder - Drag and Drop Website Builder plugin = 2.10.1.1 - Authenticated Author+ Stored Cross-Site Scripting via 'settingsjs' vulnerability discovered by WordFence in WordPress Plugin Beaver Builder versions = 2.10.1.1...

6.4CVSS5.9AI score0.00261EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/04/09 6:36 p.m.•21 views

WordPress Robo Gallery plugin <= 5.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Loading Label' Setting vulnerability

Authenticated Author+ Stored Cross-Site Scripting via 'Loading Label' Setting vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Robo Gallery versions = 5.1.3...

6.4CVSS5.9AI score0.00429EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/04/09 6:36 p.m.•24 views

WordPress PrivateContent Free plugin <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'align' Shortcode Attribute vulnerability discovered by Gilang - DJ in WordPress Plugin PrivateContent Free versions = 1.2.0...

6.4CVSS5.9AI score0.00276EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/04/09 6:31 p.m.•21 views

WordPress pdfl.io plugin <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'text' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin pdfl.io versions = 1.0.5...

6.4CVSS5.9AI score0.00296EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/04/09 6:28 p.m.•22 views

WordPress Majestic Support plugin <= 1.1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jakub Herman in WordPress Plugin Majestic Support versions = 1.1.2...

5.3CVSS5.8AI score0.00163EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 1:06 p.m.•27 views

WordPress WP Directory Kit plugin <= 1.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Martín Martín in WordPress Plugin WP Directory Kit versions = 1.5.0...

5.8AI score0.00306EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 1:03 p.m.•27 views

WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by ch4r0n in WordPress Plugin Backup Migration versions = 2.1.1...

5.8AI score0.00376EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 1:00 p.m.•21 views

WordPress MultiLoca plugin <= 4.2.15 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Denver Jackson in WordPress Plugin MultiLoca versions = 4.2.15...

5.8AI score0.00288EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:54 p.m.•24 views

WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability

WordPress Masteriyo - LMS plugin = 2.1.5 - Payment Bypass vulnerability discovered by davidfdzmorilla in WordPress Plugin Masteriyo - LMS versions = 2.1.5...

5.8AI score0.00246EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:48 p.m.•22 views

WordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin WP-BusinessDirectory versions = 4.0.0...

5.8AI score0.00465EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:46 p.m.•21 views

WordPress WP BASE Booking plugin <= 5.9.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin WP BASE Booking versions = 5.9.0...

5.8AI score0.00283EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:29 p.m.•26 views

WordPress AWP Classifieds plugin <= 4.4.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dahmani ToumipegaSUS in WordPress Plugin AWP Classifieds versions = 4.4.4...

5.8AI score0.00304EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:22 p.m.•23 views

WordPress Micdrop theme <= 1.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Micdrop versions = 1.3.1...

5.8AI score0.0025EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:22 p.m.•19 views

WordPress SingleMalt theme <= 1.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme SingleMalt versions = 1.5...

5.8AI score0.00395EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:22 p.m.•18 views

WordPress Mildhill theme <= 1.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Mildhill versions = 1.5...

5.8AI score0.00395EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:21 p.m.•23 views

WordPress Santé theme <= 1.5.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Santé versions = 1.5.1...

5.8AI score0.00308EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:21 p.m.•19 views

WordPress Konsept theme <= 1.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Konsept versions = 1.9...

5.8AI score0.00308EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:21 p.m.•21 views

WordPress Valiance theme <= 1.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Valiance versions = 1.2...

5.8AI score0.0027EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:21 p.m.•20 views

WordPress Playroom theme <= 1.4.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Playroom versions = 1.4.1...

5.8AI score0.00205EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:20 p.m.•19 views

WordPress NeoBeat theme <= 1.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme NeoBeat versions = 1.7...

5.8AI score0.00395EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:20 p.m.•22 views

WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Askka versions = 1.3.1...

5.8AI score0.00255EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:20 p.m.•21 views

WordPress Fidalgo theme <= 1.2.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Fidalgo versions = 1.2.2...

5.8AI score0.00308EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:19 p.m.•24 views

WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Töbel versions = 1.8.1...

5.8AI score0.00308EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:19 p.m.•25 views

WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Aperitif versions = 1.6...

5.8AI score0.00308EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:19 p.m.•16 views

WordPress Hiroshi theme <= 1.5.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Hiroshi versions = 1.5.1...

5.8AI score0.00308EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:18 p.m.•18 views

WordPress Zermatt theme <= 1.6.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Zermatt versions = 1.6.1...

5.8AI score0.00395EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:17 p.m.•20 views

WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerability

WordPress Alloggio - Hotel Booking theme = 2.1.2 - PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Alloggio - Hotel Booking versions = 2.1.2...

5.8AI score0.00308EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:09 p.m.•20 views

WordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme WaveRide versions = 1.4...

5.8AI score0.00334EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 12:07 p.m.•18 views

WordPress Blocksy Companion Pro plugin < 2.1.29 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Blocksy Companion Pro versions 2.1.29...

6AI score0.00372EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:39 a.m.•24 views

WordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Hitek versions 1.8.3...

5.8AI score0.00338EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:37 a.m.•21 views

WordPress Uppercase theme < 1.2.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Uppercase versions 1.2.2...

5.8AI score0.00338EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:36 a.m.•25 views

WordPress Blueprint theme < 1.1.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Blueprint versions 1.1.5...

5.8AI score0.00334EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:35 a.m.•24 views

WordPress Getaway theme < 1.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Getaway versions 1.8...

5.8AI score0.00338EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:35 a.m.•25 views

WordPress Solene Core plugin <= 2.3.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Solene Core versions = 2.3.2...

5.8AI score0.00338EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:34 a.m.•30 views

WordPress Solene theme <= 3.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Solene versions = 3.4...

5.8AI score0.00423EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:31 a.m.•26 views

WordPress Mr. SEO theme <= 2.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Mr. SEO versions = 2.0...

5.8AI score0.00423EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:31 a.m.•24 views

WordPress Malmö theme <= 2.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Malmö versions = 2.2...

5.8AI score0.00338EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:30 a.m.•27 views

WordPress Aperitif theme <= 1.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Aperitif versions = 1.5...

5.8AI score0.00423EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:28 a.m.•23 views

WordPress GeekyBot plugin <= 1.2.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin GeekyBot versions = 1.2.0...

6AI score0.00283EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:25 a.m.•22 views

WordPress WooCommerce Cart Abandonment Recovery plugin < 2.1.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin WooCommerce Cart Abandonment Recovery versions 2.1.0...

5.8AI score0.00382EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 11:24 a.m.•21 views

WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Doan Dinh Van in WordPress Plugin Simply Schedule Appointments versions = 1.6.9.27...

6AI score0.00363EPSS

SaveExploits1Affected Software1

Patchstack•added 2026/04/08 11:21 a.m.•20 views

WordPress Datalogics Ecommerce Delivery plugin <= 2.6.62 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin Datalogics Ecommerce Delivery versions = 2.6.62...

5.8AI score0.00357EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 10:54 a.m.•26 views

WordPress WP Maps plugin <= 4.9.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin WP Maps versions = 4.9.1...

5.8AI score0.00363EPSS

SaveExploits3Affected Software1

Patchstack•added 2026/04/08 10:34 a.m.•23 views

WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Form Maker by 10Web versions = 1.15.38...

6AI score0.00292EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/04/08 8:31 a.m.•40 views

WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Mikado Core versions = 1.6...

5.8AI score0.00423EPSS

SaveExploits0Affected Software1

Total number of security vulnerabilities53008