The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,094
Mitigations16,108
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
HB Audio Gallery Lite<= 1.0.0
Unauthenticated Arbitrary File Download vulnerability
7.5
3 minutes ago
Background Image Cropper<= 1.2
Unauthenticated Remote Code Execution vulnerability
10
11 minutes ago
Admin and Site Enhancements (ASE) Pro<= 8.9.0
Unauthenticated Remote Code Execution vulnerability
10
15 minutes ago
Backup by Supsystic<= 2.3.9
Unauthenticated Local File Inclusion vulnerability
8.1
24 minutes ago
Apptha Slider Gallery<= 1.0
Unauthenticated Arbitrary File Download vulnerability
7.5
30 minutes ago
Simple Fields<= 0.3.5
Unauthenticated Local File Inclusion vulnerability
8.1
33 minutes ago
WordPress Social Login and Register< 7.8.0
Unauthenticated Account Takeover vulnerability
9.8
39 minutes ago
Streamit<= 4.5.0
Unauthenticated Remote Code Execution vulnerability
10
2 hours ago
WP Media folder Addon<= 4.1.6
Unauthenticated Arbitrary File Download vulnerability
7.5
2 hours ago
Extra Checkout Options - addon for Extra Product Options plugin<= 2.3.2
WordPress Extra Checkout Options - addon for Extra Product Options plugin plugin <= 2.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload in eco_save_settings vulnerability
8.8
3 hours ago
Cost Calculator Builder Pro<= 4.0.3
Unauthenticated Remote Code Execution vulnerability
10
3 hours ago
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light<= 2.4.37
Missing Authorization to Unauthenticated Privilege Escalation vulnerability
9.8
3 hours ago
MountDev AI MCP Connector for WordPress<= 1.6.1
Unauthenticated Privilege Escalation vulnerability
9.8
3 hours ago
SAML SP Single Sign On<= 5.4.4
Unauthenticated Authentication Bypass vulnerability
9.8
3 hours ago
WPForms Pro<= 1.10.1.1
Unauthenticated Arbitrary File Write vulnerability
9
4 hours ago
EventON Action User<= 2.5.14
Missing Authorization to Unauthenticated Privilege Escalation vulnerability
7.3
4 hours ago
SMS Alert Order Notifications<= 3.9.7
Unauthenticated Authentication Bypass to Account Takeover vulnerability
9.8
4 hours ago
WP Password Policy<= 3.7.1
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
4 hours ago
Eazy Plugin Manager<= 4.4.1
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
4 hours ago
TrueBooker< 1.2.4
Unauthenticated Account Takeover vulnerability
9.8
4 hours ago