The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,657
Mitigations18,112
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Rede Itaú for WooCommerce3.7.1-5.5.2
Unauthenticated Order Status Manipulation vulnerability
5.3
2 hours ago
Rede Itaú for WooCommerce< 5.5.3
Unauthenticated Order Status Manipulation vulnerability
5.3
2 hours ago
WholesaleX<= 3.0.8
Unauthenticated Limited Privilege Escalation vulnerability
5.4
2 hours ago
Spin Wheel< 2.2.1
Unauthenticated Coupon Code Disclosure vulnerability
5.3
2 hours ago
Easy HTTPS Redirection (SSL)< 2.0.2
Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite vulnerability
4.2
2 hours ago
eaSYNC< 1.3.31
Unauthenticated Cancellation Request Creation and Email Template Update vulnerability
5.3
2 hours ago
Blog2Social<= 9.1.4
Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure vulnerability
4.3
14 hours ago
Elementor Website Builder<= 4.2.3
Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure vulnerability
4.3
14 hours ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer<= 2.34.10
Unauthenticated Arbitrary File Upload vulnerability
9.8
15 hours ago
Tracking Code Manager<= 2.6.0
Reflected Cross-Site Scripting vulnerability
7.1
15 hours ago
Ocean Extra<= 2.6.0
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
15 hours ago
Mang Board WP<= 2.4.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
15 hours ago
Groundhogg<= 4.5.14
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
15 hours ago
Photo Gallery by 10Web<= 1.8.42
Reflected Cross-Site Scripting vulnerability
7.1
15 hours ago
VK Blocks<= 1.126.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
16 hours ago
Post and Page Builder by BoldGrid<= 1.27.13
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
16 hours ago
Import and export users and customers<= 2.4.5
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.5
16 hours ago
Kirki<= 6.2.0
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.5
16 hours ago
PhastPress<= 3.10
Unauthenticated Server-Side Request Forgery vulnerability
5.4
16 hours ago
Asaas Gateway for WooCommerce< 2.7.8
Unauthenticated Order Payment Bypass vulnerability
5.3
19 hours ago