Patchstack - Page 81 of Patchstack Vulnerabilities List

Patchstack•added 2026/01/20 11:35 a.m.•7 views

WordPress Hoteller theme < 6.8.9 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Hoteller versions 6.8.9...

7.1CVSS5.3AI score0.00019EPSS

Patchstack•added 2026/01/20 11:34 a.m.•6 views

WordPress Hostiko theme < 94.3.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Hostiko versions 94.3.6...

Patchstack•added 2026/01/20 11:34 a.m.•5 views

WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme CarSpot versions 2.4.6...

6.1CVSS5.3AI score0.00064EPSS

Patchstack•added 2026/01/20 11:25 a.m.•5 views

WordPress Notifier plugin <= 2.7.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Notifier versions = 2.7.13...

6.5CVSS5.4AI score0.00021EPSS

Patchstack•added 2026/01/20 11:7 a.m.•6 views

WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme AdForest versions = 6.0.11...

8.1CVSS5.4AI score0.00222EPSS

Patchstack•added 2026/01/20 10:51 a.m.•4 views

WordPress Nelio AB Testing plugin <= 8.1.8 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by daroo in WordPress Plugin Nelio AB Testing versions = 8.1.8...

9.1CVSS5.5AI score0.00085EPSS

Patchstack•added 2026/01/20 10:45 a.m.•4 views

WordPress MailerLite – WooCommerce integration plugin <= 3.1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by NumeX in WordPress Plugin MailerLite – WooCommerce integration versions = 3.1.2...

9.3CVSS5.8AI score0.00058EPSS

Patchstack•added 2026/01/20 10:37 a.m.•5 views

WordPress Scalenut plugin <= 1.1.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by NumeX in WordPress Plugin Scalenut versions = 1.1.5...

7.5CVSS5.4AI score0.00051EPSS

Patchstack•added 2026/01/20 10:33 a.m.•3 views

WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by benzdeus in WordPress Plugin Contact Form & Lead Form Elementor Builder versions = 2.0.1...

6.5CVSS5.4AI score0.00056EPSS

Patchstack•added 2026/01/20 10:31 a.m.•3 views

WordPress Directorist Social Login plugin <= 2.1.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Directorist Social Login versions = 2.1.1...

5.4AI score0.00059EPSS

Patchstack•added 2026/01/20 8:25 a.m.•4 views

WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Simple Membership WP user Import versions = 1.9.1...

5.4CVSS5.3AI score0.00029EPSS

Patchstack•added 2026/01/20 8:16 a.m.•3 views

WordPress Directorist Booking plugin <= 2.4.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Directorist Booking versions = 2.4.1...

5.8AI score0.00043EPSS

Patchstack•added 2026/01/20 8:15 a.m.•3 views

WordPress Ai Image Alt Text Generator for WP plugin <= 1.1.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Ai Image Alt Text Generator for WP versions = 1.1.9...

4.3CVSS5.4AI score0.00048EPSS

Patchstack•added 2026/01/20 8:14 a.m.•3 views

WordPress Bold Page Builder plugin <= 5.6.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Bold Page Builder versions = 5.6.6...

6.5CVSS5.2AI score0.00045EPSS

Patchstack•added 2026/01/20 8:2 a.m.•4 views

WordPress AdForest Elementor plugin <= 3.0.11 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin AdForest Elementor versions = 3.0.11...

Patchstack•added 2026/01/20 7:58 a.m.•4 views

WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin TableOn versions = 1.0.4.2...

6.1CVSS5.3AI score0.00064EPSS

Patchstack•added 2026/01/20 7:57 a.m.•3 views

WordPress MemberPress Discord Addon plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin MemberPress Discord Addon versions = 1.1.4...

7.1CVSS5.3AI score0.00019EPSS

Patchstack•added 2026/01/20 7:56 a.m.•3 views

WordPress Easy Theme Options plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin Easy Theme Options versions = 1.0...

Patchstack•added 2026/01/20 7:55 a.m.•4 views

WordPress iRobots.txt SEO plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin iRobots.txt SEO versions = 1.1.2...

5.3AI score

Patchstack•added 2026/01/20 7:53 a.m.•4 views

WordPress Ravpage plugin <= 2.33 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin Ravpage versions = 2.33...

Patchstack•added 2026/01/20 7:46 a.m.•5 views

WordPress Simply Schedule Appointments plugin <= 1.6.9.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin Simply Schedule Appointments versions = 1.6.9.15...

6.5CVSS5.4AI score0.00049EPSS

Patchstack•added 2026/01/20 7:33 a.m.•5 views

WordPress wpCAS plugin <= 1.07 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xVenus in WordPress Plugin wpCAS versions = 1.07...

Patchstack•added 2026/01/20 6:47 a.m.•7 views

WordPress Advanced Custom Fields: Extended plugin <= 0.9.2.1 - Unauthenticated Privilege Escalation via Insert User Form Action vulnerability

Unauthenticated Privilege Escalation via Insert User Form Action vulnerability discovered by andrea bocchetti in WordPress Plugin Advanced Custom Fields: Extended versions = 0.9.2.1...

9.8CVSS5.4AI score0.00192EPSS

Patchstack•added 2026/01/20 6:28 a.m.•4 views

WordPress Koko Analytics plugin <= 2.1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Hector Ruiz Ruiz in WordPress Plugin Koko Analytics versions = 2.1.2...

8.3CVSS5.8AI score0.00121EPSS

Exploits1References1Affected Software1

Patchstack•added 2026/01/20 6:21 a.m.•6 views

WordPress Custom Fonts - Host Your Fonts Locally plugin <= 2.1.16 - Missing Authorization to Unauthenticated Font Deletion vulnerability

WordPress Custom Fonts - Host Your Fonts Locally plugin = 2.1.16 - Missing Authorization to Unauthenticated Font Deletion vulnerability discovered by type5afe in WordPress Plugin Custom Fonts – Host Your Fonts Locally versions = 2.1.16...

5.3CVSS5.5AI score0.00128EPSS

Patchstack•added 2026/01/20 6:10 a.m.•8 views

WordPress e-xact-hosted-payment plugin <= 2.0 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin E-xact Hosted Payment versions = 2.0...

9.1CVSS5.4AI score0.00152EPSS

Patchstack•added 2026/01/20 6:7 a.m.•5 views

WordPress Dokan plugin <= 4.2.4 - Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disclosure vulnerability

Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disclosure vulnerability discovered by shark3y in WordPress Plugin Dokan versions = 4.2.4...

8.1CVSS5.5AI score0.00045EPSS

Patchstack•added 2026/01/20 4:12 a.m.•4 views

WordPress Enfold theme <= 7.1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Enfold versions = 7.1.3...

6.5CVSS5.3AI score0.00019EPSS

Patchstack•added 2026/01/19 10:13 p.m.•6 views

WordPress WP Hello Bar plugin <= 1.02 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'digit_one' and 'digit_two' Parameters vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via 'digitone' and 'digittwo' Parameters vulnerability discovered by 0x34rth in WordPress Plugin WP Hello Bar versions = 1.02...

4.4CVSS5.4AI score0.00061EPSS

Patchstack•added 2026/01/19 10:13 p.m.•5 views

WordPress Viet contact plugin <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'll1', 'll2', 'll3', and 'll4' Parameters vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via 'll1', 'll2', 'll3', and 'll4' Parameters vulnerability discovered by 0x34rth in WordPress Plugin Viet contact versions = 1.3.2...

4.4CVSS5.4AI score0.00039EPSS

Patchstack•added 2026/01/19 10:12 p.m.•4 views

WordPress weMail plugin <= 2.0.7 - Insufficient Authorization via x-wemail-user Header to Sensitive Information Disclosure vulnerability

Insufficient Authorization via x-wemail-user Header to Sensitive Information Disclosure vulnerability discovered by shark3y in WordPress Plugin weMail versions = 2.0.7...

5.3CVSS5.5AI score0.00091EPSS

Patchstack•added 2026/01/19 9:54 p.m.•6 views

WordPress LearnPress - WordPress LMS Plugin plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API vulnerability

WordPress LearnPress - WordPress LMS Plugin plugin = 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API vulnerability discovered by andrea bocchetti in WordPress Plugin LearnPress versions = 4.3.2.4...

5.3CVSS5.5AI score0.00067EPSS

Patchstack•added 2026/01/19 9:53 p.m.•4 views

WordPress PeachPay - Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) plugin <= 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification vulnerability

WordPress PeachPay - Payments & Express Checkout for WooCommerce supports Stripe, PayPal, Square, Authorize.net plugin = 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugi...

5.3CVSS5.5AI score0.00155EPSS

Patchstack•added 2026/01/19 9:53 p.m.•3 views

WordPress Newsletter - Send awesome emails from WordPress plugin <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription vulnerability

WordPress Newsletter - Send awesome emails from WordPress plugin = 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription vulnerability discovered by WordFence in WordPress Plugin Newsletter versions = 9.1.0...

4.3CVSS5.5AI score0.00027EPSS

Patchstack•added 2026/01/19 9:52 p.m.•4 views

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery Management vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Gallery Management vulnerability discovered by WordFence in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.9...

5.4CVSS5.5AI score0.00055EPSS

Patchstack•added 2026/01/19 8:13 p.m.•2 views

WordPress Ecwid Shopping Cart plugin <= 7.0.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rapid0nion in WordPress Plugin Ecwid Shopping Cart versions = 7.0.5...

4.3CVSS5.4AI score0.00048EPSS

Patchstack•added 2026/01/19 7:28 p.m.•3 views

WordPress Points and Rewards for WooCommerce plugin <= 2.9.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rapid0nion in WordPress Plugin Points and Rewards for WooCommerce versions = 2.9.5...

5.4CVSS5.4AI score0.00069EPSS

Patchstack•added 2026/01/19 12:50 p.m.•4 views

WordPress SEO Booster plugin <= 6.1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin SEO Booster versions = 6.1.8...

6.5CVSS5.4AI score0.00021EPSS

Patchstack•added 2026/01/19 12:9 p.m.•2 views

WordPress PostX plugin <= 5.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by MD ISMAIL in WordPress Plugin PostX versions = 5.0.3...

7.5CVSS5.4AI score0.00058EPSS

Patchstack•added 2026/01/19 12:4 p.m.•3 views

WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Andrea Bocchetti in WordPress Plugin Simple Membership versions = 4.6.9...

4.3CVSS5.4AI score0.00039EPSS

Patchstack•added 2026/01/19 12:4 p.m.•2 views

WordPress GDPR CCPA Compliance Support plugin <= 2.7.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin GDPR CCPA Compliance Support versions = 2.7.4...

6.5CVSS5.4AI score0.00014EPSS

Patchstack•added 2026/01/19 11:58 a.m.•5 views

WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Mdr in WordPress Plugin Xpro Elementor Addons versions = 1.4.19.1...

9.1CVSS5.4AI score0.00076EPSS

Patchstack•added 2026/01/19 11:45 a.m.•3 views

WordPress Werkstatt theme < 4.8.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Werkstatt versions 4.8.3...

8.1CVSS5.4AI score0.00222EPSS

Patchstack•added 2026/01/19 11:45 a.m.•4 views

WordPress Table of Contents Creator plugin <= 1.6.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin Table of Contents Creator versions = 1.6.4.1...

5.3AI score0.00045EPSS

Patchstack•added 2026/01/19 11:44 a.m.•3 views

WordPress My Post Order plugin <= 1.2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin My Post Order versions = 1.2.1.1...

Patchstack•added 2026/01/19 11:36 a.m.•3 views

WordPress Broadstreet Ads plugin <= 1.52.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan - Blue Rock in WordPress Plugin Broadstreet Ads versions = 1.52.1...

7.6CVSS5.4AI score0.00073EPSS

Patchstack•added 2026/01/19 11:35 a.m.•3 views

WordPress Order Listener for WooCommerce plugin <= 3.6.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by NumeX in WordPress Plugin Order Listener for WooCommerce versions = 3.6.1...

9.4CVSS5.4AI score0.00078EPSS

Patchstack•added 2026/01/19 11:29 a.m.•3 views

WordPress My auctions allegro plugin <= 3.6.32 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin My auctions allegro versions = 3.6.32...

Patchstack•added 2026/01/19 11:29 a.m.•4 views

WordPress ShoutOut plugin <= 4.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin ShoutOut versions = 4.0.2...