The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total50,382
Mitigations16,221
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Participants Database< 2.7.8.4
Unauthenticated SQL Injection vulnerability
9.3
Just now
Direct Payments for WooCommerce< 2.5.3
Unauthenticated Cross-Customer Order Tampering vulnerability
7.5
11 minutes ago
Contact Form Extender for Divi &#8211; Save Entries, File Upload &amp; Country Code Field<= 1.0.6
Unauthenticated Arbitrary File Deletion vulnerability
8.6
17 minutes ago
Pronamic Pay<= 10.1.0
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
22 minutes ago
Kali Forms<= 2.4.20
Unauthenticated Remote Code Execution vulnerability
10
34 minutes ago
Ultimate Member< 2.12.1
Unauthenticated Privilege Escalation vulnerability
9.8
40 minutes ago
Bit Integrations<= 2.9.0
Unauthenticated Arbitrary File Read vulnerability
7.5
47 minutes ago
CubeWP<= 1.1.30
Unauthenticated Arbitrary File Read vulnerability
7.5
55 minutes ago
WooCommerce Social Login<= 2.8.7
WordPress WooCommerce - Social Login plugin <= 2.8.7 - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass vulnerability
9.8
1 hour ago
Single Sign On For TNG<= 2.0.0
Unauthenticated Privilege Escalation vulnerability
9.8
1 hour ago
FormGent<= 1.9.2
FormGent <= 1.9.2- Missing Authorization to Unauthenticated Arbitrary File Deletion vulnerability
8.6
1 hour ago
ghost>= 6.27.0, < 6.44.0
NPM: Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
5.3
10 hours ago
ghost>= 5.18.0, < 6.21.1
NPM: Ghost: Member existence leak via magic link sign-in response
5.3
10 hours ago
@tryghost/activitypub< 3.1.0
NPM: XSS in Ghost's ActivityPub client
7.5
10 hours ago
ghost>= 2.2.0, < 6.54.1
NPM: Ghost: Session Fixation in Ghost Admin
6.7
10 hours ago
ghost>= 0.10.0, < 6.54.1
NPM: Ghost: Theme Upload Path Traversal
6.6
10 hours ago
ghost>= 1.20.1, < 6.54.1
NPM: Ghost: Database Backup Path Traversal
5.5
10 hours ago
ghost>= 0.10.0, < 6.54.1
NPM: Ghost: Server-Side Request Forgery in Image Fetching
4.1
10 hours ago
ghost< 6.54.1
NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API
4.8
10 hours ago
ghost>= 6.19.4, < 6.21.1
NPM: Ghost: Mobiledoc image-size fetch SSRF
5.4
10 hours ago