The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,592
Mitigations18,563
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
PayPlug for WooCommerce (Official)2.8.0-3.1.0
Unauthenticated Arbitrary Order Deletion, Modification and Disclosure vulnerability
6.5
1 minute ago
Hustle<= 7.8.14.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
8 minutes ago
Casso Flow< 4.2.0
Unauthenticated WooCommerce Order Payment Confirmation vulnerability
5.3
9 minutes ago
WooCommerce Menu Cart< 3.2.1
Unauthenticated Stored XSS vulnerability
7.1
10 minutes ago
UniPAY Payment Gateway For WooCommerce<= 2.3
Unauthenticated Order Payment Forgery vulnerability
5.3
16 minutes ago
PayPlug for WooCommerce (Official)2.9.0-3.1.0
Unauthenticated Order Key Disclosure and Order Cancellation vulnerability
6.5
17 minutes ago
BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility<= 1.3.6
Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalation vulnerability
6.3
17 minutes ago
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More<= 1.31.0
Unauthenticated Local File Inclusion vulnerability
5.9
19 minutes ago
CMB2<= 2.13.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
51 minutes ago
Prime Slider – Addons For Elementor<= 4.7.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
51 minutes ago
Postie<= 1.9.87
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
IvyForms<= 1.5.1
Authenticated (Custom+) Arbitrary File Upload vulnerability
8.8
1 hour ago
WpEvently<= 5.7.8
Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter vulnerability
7.2
1 hour ago
Knowledge Base for Documentation, FAQs with AI Assistance<= 17.214.0
Reflected Cross-Site Scripting vulnerability
7.1
1 hour ago
MxChat<= 3.2.25
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
My auctions allegro<= 4.0.3
Broken Access Control vulnerability
5.4
1 hour ago
Checkout Files Upload for WooCommerce< 2.4.0
Unauthenticated Arbitrary File Upload vulnerability
10
1 hour ago
GoSMTP &#8211; SMTP for WordPress< 1.2.5
Plugin Activator+ Privilege Escalation vulnerability
7.2
2 hours ago
Contact Manager<= 9.1.2
Unauthenticated Arbitrary File Upload vulnerability
9.8
2 hours ago
VikRentCar<= 1.4.8
Cross-Site Request Forgery to Remote Code Execution vulnerability
8.8
2 hours ago