Lucene search
+L
PatchstackRecent

47752 matches found

Patchstack
Patchstack
added 2026/07/27 1:24 p.m.4 views

WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by luc in WordPress Plugin Simple Link Directory Pro versions = 15.0.6...

7.2CVSS5.8AI score0.00159EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 1:6 p.m.4 views

WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin miniorange otp verification versions = 5.5.1...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 12:58 p.m.4 views

WordPress Anti Spam and list cleaner – AcyChecker plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Anti Spam and list cleaner AcyChecker versions = 1.8.1...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 12:45 p.m.3 views

WordPress Contest Gallery plugin <= 30.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jayant Kamble in WordPress Plugin Contest Gallery versions = 30.0.6...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 12:24 p.m.7 views

WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Kali Forms versions = 2.4.18...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 12:7 p.m.3 views

WordPress Ad Invalid Click Protector (AICP) plugin <= 1.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Ad Invalid Click Protector AICP versions = 1.3.0...

6.5CVSS5.8AI score0.00196EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 11:50 a.m.4 views

WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin BackWPup versions = 5.7.4...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 11:44 a.m.5 views

WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by luc in WordPress Plugin FormCraft versions = 3.9.15...

7.2CVSS5.8AI score0.00159EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 11:40 a.m.5 views

WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by luc in WordPress Plugin GiveWP versions = 4.16.3...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 11:32 a.m.3 views

WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin GetGenie versions = 4.4.3...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 11:22 a.m.4 views

WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Ultimate Addons for Contact Form 7 versions =3.5.45...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 11:18 a.m.5 views

WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Message Filter for Contact Form 7 versions = 1.6.3.9...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 11:8 a.m.3 views

WordPress Xendit Payment plugin <= 7.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mitchell in WordPress Plugin Xendit Payment versions = 7.1.0...

7.5CVSS5.8AI score0.00202EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 11:4 a.m.5 views

WordPress Blogfolio theme <= 3.0.5 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Blogfolio versions = 3.0.5...

9.9CVSS5.8AI score0.00437EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 11:3 a.m.5 views

WordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Exclusive Addons Elementor versions = 2.8.0...

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 10:56 a.m.5 views

WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk versions = 6.82...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:54 a.m.6 views

WordPress Gillion theme <= 4.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Theme Gillion versions = 4.13...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:52 a.m.5 views

WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Easy Digital Downloads versions = 3.6.9...

4.9CVSS5.8AI score0.00325EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:51 a.m.4 views

WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Insert Headers and Footers Code – HT Script versions = 1.1.8...

4.3CVSS5.9AI score0.00098EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:51 a.m.5 views

WordPress Checkout Field Editor for WooCommerce &#8211; Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Checkout Field Editor for WooCommerce Checkout Manager versions = 3.0.5...

5.9CVSS5.8AI score0.0014EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:18 a.m.4 views

WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Sharief in WordPress Plugin Gallery PhotoBlocks versions = 1.3.3...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:16 a.m.4 views

WordPress YayPricing plugin <= 3.5.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by K. Sorrachat in WordPress Plugin YayPricing versions = 3.5.6...

5.4CVSS5.8AI score0.00223EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:16 a.m.5 views

WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by TurboNexic in WordPress Plugin Open User Map versions = 1.4.46...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:14 a.m.5 views

WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Feedzy versions = 5.2.4...

4.9CVSS5.8AI score0.00119EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:11 a.m.4 views

WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Location Weather versions = 3.0.6...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:11 a.m.6 views

WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.33 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Photonic Gallery & Lightbox for Flickr, SmugMug & Others versions = 3.33...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:8 a.m.7 views

WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Google Review Slider versions = 18.4...

4.3CVSS5.8AI score0.00098EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 9:8 a.m.4 views

WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Google Review Slider versions = 18.4...

7.6CVSS6AI score0.00226EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 7:42 a.m.5 views

WordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Kirki versions = 6.0.13...

6.8CVSS5.8AI score0.00325EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 7:38 a.m.4 views

WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Thrive Leads Version versions = 10.9.2...

6.5CVSS5.8AI score0.00242EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 7:34 a.m.4 views

WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ЮKassa для WooCommerce versions = 2.16.1...

6.5CVSS5.8AI score0.00355EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 7:27 a.m.5 views

WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by luc in WordPress Plugin RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg versions = 1.5.1...

6.5CVSS5.8AI score0.00279EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 7:17 a.m.7 views

WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Septio Noerdiansyah in WordPress Plugin FundEngine versions = 1.7.8...

6.5CVSS5.8AI score0.00352EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 7:5 a.m.5 views

WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Booking Calendar versions = 11.4.2...

7.1CVSS5.8AI score0.0018EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 7:0 a.m.5 views

WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by anhcd05 in WordPress Plugin RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg versions = 1.5.1...

6.5CVSS5.8AI score0.00211EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/07/27 6:0 a.m.4 views

WordPress Calendar plugin < 1.3.18 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Marcus Cornes in WordPress Plugin Calendar versions 1.3.18...

6.8CVSS5.8AI score0.00235EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/07/27 6:0 a.m.3 views

WordPress Contact Form 7 plugin < 2.5 - Open Redirect vulnerability

Open Redirect vulnerability discovered by Pedro Antunes in WordPress Plugin Contact Form 7 – PayPal & Stripe Add-on versions 2.5...

4.7CVSS5.8AI score0.00171EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/07/27 6:0 a.m.4 views

WordPress Smart Manager plugin < 8.92.0 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by TruongLV1 From FPT Nightwolf in WordPress Plugin Smart Manager versions 8.92.0...

4.8CVSS5.8AI score0.00142EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/07/27 6:0 a.m.3 views

WordPress Download Manager plugin < 3.3.62 - Unauthorized Protected File Download vulnerability

Unauthorized Protected File Download vulnerability discovered by Alessandro Greco aka Aleff, Giovanbattista Ianni University of Calabria - UNICAL in WordPress Plugin Download Manager versions 3.3.62...

7.5CVSS5.8AI score0.00232EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/07/27 6:0 a.m.4 views

WordPress WPBot plugin < 8.5.2 - Admin+ Second-Order SQL Injection vulnerability

Admin+ Second-Order SQL Injection vulnerability discovered by Mustafa Ahmed in WordPress Plugin ChatBot versions 8.5.2...

3.8CVSS6AI score0.00158EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/07/27 6:0 a.m.4 views

WordPress The Events Calendar plugin < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation vulnerability

Unauthenticated Event Aggregator Import Status Manipulation vulnerability discovered by Haitam Lazaar in WordPress Plugin The Events Calendar versions 6.16.5.1...

5.3CVSS5.8AI score0.00182EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/07/27 6:0 a.m.3 views

WordPress Advanced Ads plugin < 2.0.23 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Pablo González and Francisco José Ramírez in WordPress Plugin Advanced Ads versions 2.0.23...

6.1CVSS5.8AI score0.00149EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/07/27 12:0 a.m.6 views

WordPress SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin <= 3.9.7 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin SMS Alert Order Notifications versions = 3.9.7...

4.9CVSS6AI score0.00288EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/07/24 10:36 p.m.10 views

NPM: Quasar: Prototype pollution in the extend() utility

NPM: Quasar: Prototype pollution in the extend utility vulnerability discovered by ? in WordPress Npm quasar versions = 2.21.4...

5.9AI score
SaveExploits0References4Affected Software1
Patchstack
Patchstack
added 2026/07/24 10:35 p.m.10 views

NPM: Shescape: Quadratic-time denial of service in the flag-protection

NPM: Shescape: Quadratic-time denial of service in the flag-protection vulnerability discovered by ? in WordPress Npm shescape versions = 2.1.11, 2.1.14...

5.9AI score
SaveExploits0References9Affected Software1
Patchstack
Patchstack
added 2026/07/24 10:34 p.m.17 views

NPM: Shescape: Home-directory disclosure in assignment context on Unix with Dash

NPM: Shescape: Home-directory disclosure in assignment context on Unix with Dash vulnerability discovered by ? in WordPress Npm shescape versions 2.1.14...

5.8AI score
SaveExploits0References9Affected Software1
Patchstack
Patchstack
added 2026/07/24 10:34 p.m.13 views

NPM: Shescape: Shell injection via unescaped parentheses on Windows with CMD

NPM: Shescape: Shell injection via unescaped parentheses on Windows with CMD vulnerability discovered by ? in WordPress Npm shescape versions 2.1.14...

5.8AI score
SaveExploits0References9Affected Software1
Patchstack
Patchstack
added 2026/07/24 10:33 p.m.19 views

NPM: Shescape: Path disclosure on Unix with Zsh

NPM: Shescape: Path disclosure on Unix with Zsh vulnerability discovered by ? in WordPress Npm shescape versions 2.1.14...

5.8AI score
SaveExploits0References9Affected Software1
Patchstack
Patchstack
added 2026/07/24 9:53 p.m.8 views

NPM: brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

NPM: brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash vulnerability discovered by ? in WordPress Npm brace-expansion versions 1.1.17...

7.5CVSS5.4AI score0.00339EPSS
SaveExploits0References12Affected Software1
Patchstack
Patchstack
added 2026/07/24 9:50 p.m.13 views

NPM: sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock

NPM: sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock vulnerability discovered by ? in WordPress Npm sm-crypto versions 0.5.0...

5.8AI score
SaveExploits0References3Affected Software1
Total number of security vulnerabilities47752