The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,081
Mitigations17,016
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
The Events Calendar<= 6.17.4
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
9.8
50 minutes ago
The Events Calendar<= 6.17.3
Unauthenticated Code Injection to Remote Code Execution vulnerability
9.8
51 minutes ago
GEO my WordPress<= 4.5.5.3
Unauthenticated Local File Inclusion vulnerability
7.5
53 minutes ago
MPG<= 4.2.1
Unauthenticated SQL Injection vulnerability
9.3
53 minutes ago
Tutor LMS<= 4.0.7
Authenticated (Subscriber+) PHP Object Injection to Remote Code Execution vulnerability
8.8
55 minutes ago
bbPress<= 2.6.14
Sensitive Data Exposure vulnerability
5.3
1 hour ago
DT LMS – elearning, WordPress LMS Plugin<= 1.1
Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification vulnerability
5.3
1 hour ago
ElasticPress<= 5.3.4
Sensitive Data Exposure vulnerability
5.3
1 hour ago
Master Addons for Elementor<= 3.2.2
Broken Access Control vulnerability
7.1
1 hour ago
WP-Members<= 3.5.6
Reflected Cross-Site Scripting vulnerability
7.1
5 hours ago
Registration Form for WooCommerce1.1.0-1.1.2
Contributor+ Privilege Escalation vulnerability
8.8
6 hours ago
Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons< 3.3.3
Unauthenticated Stored XSS vulnerability
7.1
6 hours ago
Advanced Customized Prompts<= 1.0.1
Subscriber+ Stored XSS vulnerability
6.5
6 hours ago
MultiVendorX5.0.0-5.0.15
Store Owner+ Privilege Escalation to Administrator vulnerability
7.2
6 hours ago
Visualizer< 4.0.6
Contributor+ Arbitrary Chart Deletion vulnerability
5.4
6 hours ago
WPCafe3.0.10-3.0.17
Unauthenticated Order Disclosure and Modification vulnerability
6.5
6 hours ago
المنتور فارسی2.7.10-2.8.1
Unauthenticated ZarinPal Payment Callback Authority Bypass vulnerability
5.3
6 hours ago
miniOrange's Google Authenticator18.0-19.2
Unauthenticated Arbitrary Option Deletion vulnerability
9.3
6 hours ago
miniOrange's Google Authenticator5.3.24-6.3.0
Unauthenticated Arbitrary Option Deletion vulnerability
9.3
6 hours ago
Teddy Bear Customize Addon<= 1.0.5
Unauthenticated Arbitrary File Upload vulnerability
10
6 hours ago