The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,063
Mitigations16,663
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Store Locator WordPress< 1.6.9
Admin+ Arbitrary File Read via Path Traversal vulnerability
4.9
30 minutes ago
Fluent Booking< 2.1.2
Calendar Manager+ Sensitive Information Disclosure via Attendee Export vulnerability
4.9
30 minutes ago
LearnPress< 4.3.7
Unauthenticated Sensitive User Information Disclosure via REST API vulnerability
5.3
31 minutes ago
WP Go Maps< 10.0.10
Unauthenticated Sensitive Information Disclosure via Marker ID vulnerability
5.3
31 minutes ago
Frontend File Manager<= 23.6
Author+ Arbitrary Post Deletion vulnerability
5.4
32 minutes ago
Really Simple SSL< 9.5.10.1
Two-Factor OTP Bypass vulnerability
7.5
34 minutes ago
Eupago Gateway For Woocommerce< 4.7.2
Unauthenticated Arbitrary Refund Initiation vulnerability
5.3
42 minutes ago
wp2epub<= 0.65
Unauthenticated RCE vulnerability
9
56 minutes ago
DoLeads Integrator<= 1.2.2
Unauthenticated RCE vulnerability
9
57 minutes ago
User Registration< 5.2.0
Unauthenticated Paid Membership Bypass vulnerability
5.3
1 hour ago
Salon booking system< 10.30.20
Subscriber+ Booking Approval Bypass vulnerability
4.3
1 hour ago
WebAuthn Provider for Two Factor< 2.5.6
2FA Bypass vulnerability
7.2
1 hour ago
WP DSGVO Tools (GDPR)< 3.1.40
Unauthenticated Sensitive Information Disclosure via Subject Access Request vulnerability
7.5
1 hour ago
WP Support Plus Responsive Ticket System<= 9.1.2
Unauthenticated Support Ticket Access via Session Cookie Forgery vulnerability
6.5
1 hour ago
FluentForm< 6.2.1
Subscriber+ Subscription Cancellation via IDOR vulnerability
4.3
1 hour ago
Advanced Form Integration< 2.1.1
Unauthenticated Privilege Escalation via Breakdance Form Role Mapping vulnerability
8.1
1 hour ago
WP Adminify< 4.2.10
Contributor+ Sensitive Information Disclosure via Global Search AJAX vulnerability
4.3
1 hour ago
FluentForm< 6.2.5
Form Manager+ Cross-Form Submission Entry Deletion via IDOR vulnerability
2.7
1 hour ago
Everest Forms< 3.5.0
Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts vulnerability
5.3
1 hour ago
Product Configurator for WooCommerce< 1.7.3
Unauthenticated Private/Draft Product Data Disclosure via pc_get_data vulnerability
5.3
2 hours ago