The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,592
Mitigations18,561
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
UniPAY Payment Gateway For WooCommerce<= 2.3
Unauthenticated Order Payment Forgery vulnerability
5.3
3 minutes ago
PayPlug for WooCommerce (Official)2.9.0-3.1.0
Unauthenticated Order Key Disclosure and Order Cancellation vulnerability
6.5
4 minutes ago
BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility<= 1.3.6
Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalation vulnerability
6.3
5 minutes ago
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More<= 1.31.0
Unauthenticated Local File Inclusion vulnerability
5.9
6 minutes ago
CMB2<= 2.13.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
38 minutes ago
Prime Slider – Addons For Elementor<= 4.7.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
38 minutes ago
Postie<= 1.9.87
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
51 minutes ago
IvyForms<= 1.5.1
Authenticated (Custom+) Arbitrary File Upload vulnerability
8.8
54 minutes ago
WpEvently<= 5.7.8
Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter vulnerability
7.2
54 minutes ago
Knowledge Base for Documentation, FAQs with AI Assistance<= 17.214.0
Reflected Cross-Site Scripting vulnerability
7.1
58 minutes ago
MxChat<= 3.2.25
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
My auctions allegro<= 4.0.3
Broken Access Control vulnerability
5.4
1 hour ago
Checkout Files Upload for WooCommerce< 2.4.0
Unauthenticated Arbitrary File Upload vulnerability
10
1 hour ago
GoSMTP &#8211; SMTP for WordPress< 1.2.5
Plugin Activator+ Privilege Escalation vulnerability
7.2
1 hour ago
Contact Manager<= 9.1.2
Unauthenticated Arbitrary File Upload vulnerability
9.8
1 hour ago
VikRentCar<= 1.4.8
Cross-Site Request Forgery to Remote Code Execution vulnerability
8.8
2 hours ago
Customer Email Verification for WooCommerce<= 2.8.2
Unauthenticated Authentication Bypass vulnerability
4.8
5 hours ago
Lumise Product Designer<= 2.1.2
Unauthenticated Arbitrary File Read vulnerability
7.5
5 hours ago
Recipe Card Blocks for Gutenberg & Elementor3.5.0-3.6.3
Contributor+ SQLi vulnerability
8.5
6 hours ago
Popup by Supsystic< 2.0.2
Unauthenticated SSRF vulnerability
5.4
6 hours ago