The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,696
Mitigations18,135
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
miniorange otp verification<= 5.5.8
Unauthenticated Authentication Bypass vulnerability
8.1
4 minutes ago
Email Verification for WooCommerce<= 3.3.0
Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter vulnerability
8.1
5 minutes ago
PilotPress<= 2.0.43
Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter vulnerability
8.8
8 minutes ago
InstaWP Connect<= 0.1.4.1
Authenticated (Subscriber+) Privilege Escalation vulnerability
7.5
8 minutes ago
Nexter Extension<= 4.7.11
Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter vulnerability
7.5
9 minutes ago
Gwolle Guestbook<= 5.1.1
Reflected Cross-Site Scripting vulnerability
7.1
18 minutes ago
Modula Image Gallery<= 3.0.11
Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability
7.5
18 minutes ago
Colibri Page Builder<= 1.0.390
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
19 minutes ago
Klarna Payments for WooCommerce<= 4.13.3
Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
20 minutes ago
Feedzy<= 5.2.11
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
21 minutes ago
Forminator<= 1.58.1
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
21 minutes ago
Debloat – Remove Unused CSS, Optimize JS<= 1.3.0
Unauthenticated Arbitrary File Read vulnerability
5.9
21 minutes ago
FluentCart<= 1.7.0
Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
23 minutes ago
MailOptin<= 1.2.78.6
Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter vulnerability
9.8
27 minutes ago
Popup box6.4.1-6.4.2
Unauthenticated Arbitrary Shortcode Execution vulnerability
3.7
29 minutes ago
Complianz<= 7.5.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
29 minutes ago
Mang Board WP<= 2.4.4
Unauthenticated Arbitrary File Upload vulnerability
9.8
29 minutes ago
Flying Scripts: Delay JavaScript to Improve Site Speed & Performance<= 1.2.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
29 minutes ago
NotificationX<= 3.3.3
Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route vulnerability
7.1
34 minutes ago
Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing &amp; Smart Insights<= 1.9.2.1
Unauthenticated Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter vulnerability
7.1
35 minutes ago