The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,682
Mitigations18,118
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing &amp; Smart Insights<= 1.9.2.1
Unauthenticated Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter vulnerability
7.1
1 minute ago
NotificationX<= 3.3.3
Missing Authorization to Unauthenticated Arbitrary Content Injection vulnerability
5.3
23 minutes ago
Mail Mint<= 1.31.4
Authenticated (Custom+) SQL Injection vulnerability
8.5
49 minutes ago
Image Hub &#8211; Free Images from Unsplash, Pixabay, Pexels, Openverse &amp; Giphy<= 1.2.0
Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML vulnerability
4.3
57 minutes ago
FluentCart<= 1.7.0
Authenticated (Administrator+) SQL Injection vulnerability
7.6
1 hour ago
WP Dark Mode<= 5.3.17
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Tutor LMS< 4.1.1
Unauthenticated Tutor Page Force-Publish and Content Overwrite vulnerability
7.5
6 hours ago
Cardinity Payment Gateway for WooCommerce3.2.6-3.4.1
Unauthenticated Arbitrary Order Payment Forgery vulnerability
5.3
6 hours ago
User Rights Access Manager<= 1.1.3
Unauthenticated Privilege Escalation vulnerability
9.8
7 hours ago
Rede Itaú for WooCommerce3.7.1-5.5.2
Unauthenticated Order Status Manipulation vulnerability
5.3
10 hours ago
Rede Itaú for WooCommerce< 5.5.3
Unauthenticated Order Status Manipulation vulnerability
5.3
10 hours ago
WholesaleX<= 3.0.8
Unauthenticated Limited Privilege Escalation vulnerability
5.4
10 hours ago
Spin Wheel< 2.2.1
Unauthenticated Coupon Code Disclosure vulnerability
5.3
10 hours ago
Easy HTTPS Redirection (SSL)< 2.0.2
Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite vulnerability
4.2
10 hours ago
eaSYNC< 1.3.31
Unauthenticated Cancellation Request Creation and Email Template Update vulnerability
5.3
10 hours ago
Cooked<= 1.16.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
16 hours ago
Blog2Social<= 9.1.4
Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure vulnerability
4.3
21 hours ago
Elementor Website Builder<= 4.2.3
Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure vulnerability
4.3
22 hours ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer<= 2.34.10
Unauthenticated Arbitrary File Upload vulnerability
9.8
23 hours ago
Tracking Code Manager<= 2.6.0
Reflected Cross-Site Scripting vulnerability
7.1
23 hours ago