The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,963
Mitigations18,238
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Brizy2.8.23
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago
DiviGear Carousel<= 5.2.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
7 hours ago
Document Gallery4.1-5.1.1
Unauthenticated Document Thumbnail Replacement vulnerability
5.3
7 hours ago
BDM Digital Payment Gateway1.2.7-1.3.12
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
7 hours ago
Coinbase Commerce Payment Gateway for WooCommerce<= 1.4.1
Unauthenticated Webhook Signature Bypass vulnerability
5.3
7 hours ago
WP Photo Album Plus< 9.2.11.002
Reflected XSS vulnerability
7.1
8 hours ago
WP User Manager2.9-2.9.19
Unauthenticated Account Creation vulnerability
5.3
8 hours ago
EventON - Subscriber<= 1.4.5
WordPress EventON - Subscriber plugin <= 1.4.5 - Unauthenticated SQL Injection vulnerability
9.3
8 hours ago
Easy Property Listings< 3.5.27
Subscriber+ Sensitive Data Disclosure vulnerability
4.3
8 hours ago
Easy Property Listings< 3.5.28
Unauthenticated Hidden Listing Details Disclosure vulnerability
5.3
8 hours ago
Classified Listing<= 6.1.5
Direct static code injection vulnerability
4.3
1 day ago
Surfer<= 1.8.0.744
Broken Access Control vulnerability
5.4
1 day ago
WP Mailster<= 1.9.1.0
Local File Inclusion vulnerability
6.5
1 day ago
Event Tickets<= 5.30.1
Insecure Direct Object References (IDOR) vulnerability
4.3
1 day ago
YITH WooCommerce Product Bundles<= 2.29.0
Broken Access Control vulnerability
5.3
1 day ago
Salon booking system< 10.31.11
Salon Staff+ Administrator Role Demotion vulnerability
5.5
1 day ago
Salon booking system10.17-10.31.10
Salon Staff+ Privilege Escalation to Administrator vulnerability
7.2
1 day ago
ThirstyAffiliates< 3.12.1
Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection vulnerability
6.5
1 day ago
Modern Events Calendar< 7.37.0
Subscriber+ SQLi vulnerability
8.5
1 day ago
Modern Events Calendar Lite< 7.37.0
Subscriber+ SQLi vulnerability
8.5
1 day ago