The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,204
Mitigations16,686
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP ERP<= 1.17.8
Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment vulnerability
10
16 minutes ago
Security Hardener<= 2.4.4
Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
21 minutes ago
InfusedWoo Pro<= 5.1.17
Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
35 minutes ago
SmilePass Selfie Login<= 1.0.2
Unauthenticated Authentication Bypass vulnerability
9.8
47 minutes ago
Social Login & Sharing buttons with Analytics By SoClever<= 1.2.0
Unauthenticated Authentication Bypass vulnerability
9.8
53 minutes ago
WP Social Media Login<= 1.0.6
Unauthenticated Account Takeover vulnerability
9.8
1 hour ago
MalCare Security5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
1 hour ago
BlogVault5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
1 hour ago
The WP Remote WordPress Plugin5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
1 hour ago
CM Map Locations<= 2.1.8
Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action vulnerability
8.8
1 hour ago
Mang Board WP<= 2.3.7
Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie vulnerability
8.8
2 hours ago
Noptin< 4.3.3
Unauthenticated Subscriber PII and confirm_key Disclosure vulnerability
5.3
2 hours ago
Tutor LMS< 4.0.6
Unauthenticated SQLi vulnerability
5.3
2 hours ago
Avada<= 7.16
Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability
9.8
2 hours ago
Fusion Builder<= 3.16
Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability
9.8
2 hours ago
WP Data Access<= 5.5.68
Unauthenticated Insecure Direct Object Reference to Data Access vulnerability
5.3
3 hours ago
Greenshift<= 12.8.9
Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI vulnerability
6.5
3 hours ago
Reviews and Rating – Google My Business<= 5.10
WordPress Reviews and Rating - Google Reviews plugin <= 5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes vulnerability
6.5
3 hours ago
WP Project Manager2.1.0-4.0.6
Unauthenticated Subscriber Account Creation vulnerability
5.3
3 hours ago
RegistrationMagic< 6.0.9.4
Admin+ SQLi vulnerability
7.6
4 hours ago