The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,432
Mitigations16,338
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Payment Gateway for PayPal on WooCommerce< 9.2.1
Unauthenticated Payment Bypass via PayPal Advanced Return Handler vulnerability
5.3
16 minutes ago
Welcart e-Commerce< 2.11.33
Unauthenticated Payment Bypass via Forged Settlement Callback vulnerability
5.3
17 minutes ago
Wallet System for WooCommerce< 2.7.10
Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount vulnerability
4.3
18 minutes ago
Royal Elementor Addons< 1.7.1065
Contributor+ Stored XSS via Icon Box Widget vulnerability
6.5
19 minutes ago
Order Sync with Zendesk for WooCommerce< 2.2.3
Unauthenticated Customer Order Data Disclosure vulnerability
5.3
20 minutes ago
ProSolution WP Client< 2.0.9
Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls vulnerability
4.3
21 minutes ago
WP Photo Album Plus< 9.2.09.002
Subscriber+ Cross-Album File Upload via Missing Authorization vulnerability
4.3
22 minutes ago
WooCommerce Subscriptions< 9.1.0
Unauthenticated RCE via PHP Object Injection vulnerability
10
23 minutes ago
Events Manager< 7.4.1
Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability
3.1
52 minutes ago
Form Maker by 10Web< 1.15.45
Subscriber+ SQL Injection via display_name vulnerability
8.5
53 minutes ago
WP Photo Album Plus< 9.2.07.002
Unauthenticated Option Disclosure via gettogo vulnerability
5.3
56 minutes ago
Cookie Consent – GDPR & CCPA Cookie Banner & Consent Manager< 0.0.10
Subscriber+ MaxMind License Key Update vulnerability
5.4
58 minutes ago
User Access Manager< 2.3.15
Unauthenticated Restricted Content Disclosure via REST API vulnerability
5.3
59 minutes ago
PowerPress Podcasting< 11.17.1
Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL vulnerability
4.9
1 hour ago
Total Upkeep< 1.17.3
Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret (regression of CVE-2020-36848) vulnerability
7.3
1 hour ago
Welcart e-Commerce< 2.11.34
Author+ Stored XSS via Product Name vulnerability
5.9
1 hour ago
Cookie Consent – GDPR & CCPA Cookie Banner & Consent Manager< 0.0.10
Subscriber+ Consent Settings Update and Consent Log Disclosure vulnerability
5.4
1 hour ago
Patterns Kit<= 1.0.3
Contributor+ Stored XSS via YouTube Popup Link vulnerability
6.5
1 hour ago
Import WP< 2.14.23
Unauthenticated Sensitive Information Exposure via Export File Download vulnerability
5.3
1 hour ago
WP Crowdfunding< 2.2.1
Subscriber+ Campaign Creation via Missing Authorization vulnerability
4.3
1 hour ago