The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,934
Mitigations16,594
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Broken Link Checker< 2.4.12
Unauthenticated RCE via Query Variable Injection vulnerability
10
14 minutes ago
TrueBooker< 1.2.7
Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked vulnerability
5.3
20 minutes ago
TrueBooker< 1.2.7
Unauthenticated Customer PII Disclosure via Multiple AJAX Actions vulnerability
5.3
21 minutes ago
TrueBooker< 1.2.7
Unauthenticated Account Takeover via Multiple AJAX Actions vulnerability
9.8
21 minutes ago
TrueBooker< 1.2.7
Unauthenticated Arbitrary Appointment Status Change via update_appointment_status vulnerability
5.3
21 minutes ago
WP Maps< 4.9.8
Subscriber+ Unlimited Autoloaded Option Creation vulnerability
5.4
30 minutes ago
JetEngine< 3.8.14
Author+ Stored XSS via SVG Upload vulnerability
5.9
31 minutes ago
WP Directory Kit< 1.5.7
Unauthenticated User Email Disclosure via select_2_ajax_user vulnerability
5.3
31 minutes ago
W3 Total Cache< 2.10.5
Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key vulnerability
9.8
1 hour ago
TabaPay Gateway<= 1.4.0
Unauthenticated Account Takeover via Payment Callback vulnerability
9.8
1 hour ago
Product Shortlist<= 1.0.4
Unauthenticated SQL Injection via get_shortlisted_products vulnerability
9.3
1 hour ago
SmartCrawl< 3.16.3
Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration vulnerability
4.3
1 hour ago
Simple File List<= 6.3.11
Unauthenticated Stored XSS via File Description vulnerability
7.1
1 hour ago
Simple File List<= 6.3.11
Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability
7.5
1 hour ago
User Verification<= 2.0.47
Unauthenticated Arbitrary Account Lockout via IDOR vulnerability
7.5
1 hour ago
Easy Media Replace<= 0.2.0
Author+ Stored XSS via Attachment Title vulnerability
5.9
1 hour ago
YayCurrency< 3.3.5
Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration vulnerability
5.3
1 hour ago
Quiz And Survey Master< 11.2.4
Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR vulnerability
4.3
1 hour ago
Quiz And Survey Master< 11.2.4
Contributor+ Arbitrary Quiz Text Settings Update via IDOR vulnerability
4.3
1 hour ago
Booking calendar, Appointment Booking System<= 3.2.36
Unauthenticated Stored XSS via SVG File Upload vulnerability
7.1
1 hour ago