The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,154
Mitigations18,278
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
LearnPress<= 4.4.10
Unauthenticated PHP Object Injection vulnerability
9.8
5 days ago
OttoKit<= 1.1.40
Privilege Escalation vulnerability
9.8
5 days ago
Theme My Login<= 7.2.1
Unauthenticated Privilege Escalation vulnerability
9.8
6 days ago
My Calendar<= 3.8.7
Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute
9.8
6 days ago
miniorange otp verification<= 5.5.8
Unauthenticated Authentication Bypass vulnerability
8.1
6 days ago
MailOptin<= 1.2.78.6
Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter vulnerability
9.8
6 days ago
The Grid<= 2.8.1
Remote Code Execution (RCE) vulnerability
10
7 days ago
JTL-Connector for WooCommerce<= 2.4.3
Unauthenticated Arbitrary File Upload vulnerability
9.8
13/10/2026
Abandoned Cart Pro for WooCommerce<= 10.8.0
Unauthenticated SQL Injection vulnerability
9.3
13/10/2026
Divi Plus<= 2.4.0
Unauthenticated Arbitrary File Read vulnerability
7.5
09/10/2026
Funnel Builder by FunnelKit<= 3.16.0.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
09/10/2026
Fusion Builder<= 3.16.1
Unauthenticated Arbitrary WordPress Action Invocation vulnerability
9.1
09/10/2026
Bricksforge<= 3.1.8.9
Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter vulnerability
10
07/10/2026
Document Gallery<= 5.1.1
Cross Site Scripting (XSS) vulnerability
7.1
05/10/2026
Zombify<= 1.7.7
Arbitrary File Upload vulnerability
10
04/10/2026
Ajax Search Pro<= 4.29.1
SQL Injection vulnerability
9.3
03/10/2026
Request a Quote for WooCommerce<= 2.9.2
Unauthenticated Arbitrary File Upload vulnerability
10
28/09/2026
GamiPress<= 8.0.2
SQL Injection vulnerability
8.5
25/09/2026
Bookly<= 28.2
Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion vulnerability
6.5
25/09/2026
Contact Form by WPForms<= 2.0.2
Reflected Cross-Site Scripting vulnerability
7.1
25/09/2026