The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total52,139
Mitigations17,039
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Export &amp; Import WPBakery Page Builder<= 1.0.2
CSRF to Stored XSS vulnerability
7.1
45 minutes ago
Amelia9.0-9.8.0
Unauthenticated Payment Bypass vulnerability
5.3
51 minutes ago
Temporary Login Without Password< 1.9.9
Authenticated Temporary Access Revocation Bypass vulnerability
5.5
52 minutes ago
YayPricing< 3.5.7
Subscriber+ Stored XSS vulnerability
6.5
53 minutes ago
User Registration< 5.2.8
Author+ Privilege Escalation to Administrator vulnerability
7.2
53 minutes ago
GenieWords1.5.27-1.5.34
Unauthenticated Stored XSS and Configuration Overwrite vulnerability
7.1
54 minutes ago
YouTube Embed - YouTube Gallery, Vimeo Gallery - Wordpress Plugin10.0-10.3
Unauthenticated Stored XSS vulnerability
7.1
54 minutes ago
BE REST Endpoints<= 1.0.0
Unauthenticated Stored XSS and Widget Manipulation vulnerability
7.1
55 minutes ago
Hoo Companion1.0.2
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
Rox Appointment Booking &#8211; Appointment Booking Scheduling Solution< 1.2.0
Unauthenticated Holiday Schedule Modification vulnerability
6.5
1 hour ago
Rox Appointment Booking &#8211; Appointment Booking Scheduling Solution< 1.2.0
Unauthenticated Price Manipulation and Payment Method Restriction Bypass vulnerability
5.3
1 hour ago
Simple Membership< 4.7.8
Subscriber+ Membership Level Escalation vulnerability
5.4
1 hour ago
Mobile Events Manager<= 1.4.8.3
Broken Access Control vulnerability
7.5
1 hour ago
Mobile DJ Manager< 1.7.8.5
Unauthenticated Arbitrary Post Deletion vulnerability
7.5
1 hour ago
Album Cover Finder<= 0.7.0
Unauthenticated SQLi vulnerability
9.3
1 hour ago
WPStoreCart<= 5.0.7
Unauthenticated PHP Object Injection vulnerability
9.8
1 hour ago
SAMO Forms<= 1.0.0
Unauthenticated SQLi vulnerability
9.3
1 hour ago
Frontegg SAML SSO<= 1.0.1
Unauthenticated Account Takeover vulnerability
9.8
1 hour ago
Ads by WPQuads3.0.4
Subscriber+ Ad-Selling Payment Bypass vulnerability
4.3
1 hour ago
Zonify &#8211; Amazon Product Importer for WooCommerce< 1.0.5
Unauthenticated Account Login Token Disclosure vulnerability
7.5
1 hour ago