The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,375
Mitigations16,315
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
InstaWP Connect<= 0.1.3.7
Broken Access Control vulnerability
5.3
14 minutes ago
WP Event SOlution< 4.1.20
Unauthenticated Account Creation via Waiting List Endpoint vulnerability
5.3
3 hours ago
KiviCare< 4.5.2
Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOR vulnerability
6.5
3 hours ago
WP Event SOlution< 4.1.20
Contributor+ Order Information Disclosure via IDOR vulnerability
4.3
3 hours ago
WP Event SOlution< 4.1.20
Contributor+ Customer PII Disclosure via REST API vulnerability
4.3
3 hours ago
LearnPress< 4.4.4
Subscriber+ Sensitive Information Exposure via AI Assistant vulnerability
4.3
3 hours ago
Tourmaster< 5.4.8
Stored XSS vulnerability
7.1
3 hours ago
WP Photo Album Plus< 9.2.04.003
Subscriber+ Stored XSS vulnerability
6.5
4 hours ago
CubeWP<= 1.1.30
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
4 hours ago
WordPress<= 7.0.3
Authenticated (Author+) File Type Confusion to Remote Code Execution vulnerability
9.1
18 hours ago
GiveWP< 4.16.6
Cross Site Scripting (XSS) vulnerability
6.5
21 hours ago
Revolut Gateway for WooCommerce< 4.22.10
Broken Access Control vulnerability
5.3
22 hours ago
GiveWP< 4.16.6
Broken Access Control vulnerability
5.3
22 hours ago
MailChimp For WooCommerce< 6.2
SQL Injection vulnerability
7.6
23 hours ago
WP Data Access<= 5.5.79
Cross Site Scripting (XSS) vulnerability
5.9
23 hours ago
Featured Image from URL<= 5.3.3
Cross Site Scripting (XSS) vulnerability
6.5
23 hours ago
Ninja Tables Pro5.2.11
Backdoor vulnerability
10
1 day ago
Fluent Forms Pro Add On Pack6.2.7
Backdoor vulnerability
10
1 day ago
Formidable Digital Signatures<= 3.0.6
Unauthenticated Arbitrary File Deletion via Signature Field vulnerability
8.6
1 day ago
Passwordless Login by VentraConnect<= 1.4.3
WordPress Social Login, Passkeys, Magic Link & Email OTP - Passwordless Login by VentraConnect plugin <= 1.4.3 - Unauthenticated Authentication Bypass via Spotify OAuth Callback vulnerability
8.1
1 day ago