The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,660
Mitigations18,117
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Tutor LMS< 4.1.1
Unauthenticated Tutor Page Force-Publish and Content Overwrite vulnerability
7.5
5 hours ago
Cardinity Payment Gateway for WooCommerce3.2.6-3.4.1
Unauthenticated Arbitrary Order Payment Forgery vulnerability
5.3
5 hours ago
User Rights Access Manager<= 1.1.3
Unauthenticated Privilege Escalation vulnerability
9.8
7 hours ago
Rede Itaú for WooCommerce3.7.1-5.5.2
Unauthenticated Order Status Manipulation vulnerability
5.3
9 hours ago
Rede Itaú for WooCommerce< 5.5.3
Unauthenticated Order Status Manipulation vulnerability
5.3
9 hours ago
WholesaleX<= 3.0.8
Unauthenticated Limited Privilege Escalation vulnerability
5.4
9 hours ago
Spin Wheel< 2.2.1
Unauthenticated Coupon Code Disclosure vulnerability
5.3
9 hours ago
Easy HTTPS Redirection (SSL)< 2.0.2
Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite vulnerability
4.2
9 hours ago
eaSYNC< 1.3.31
Unauthenticated Cancellation Request Creation and Email Template Update vulnerability
5.3
9 hours ago
Blog2Social<= 9.1.4
Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure vulnerability
4.3
21 hours ago
Elementor Website Builder<= 4.2.3
Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure vulnerability
4.3
21 hours ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer<= 2.34.10
Unauthenticated Arbitrary File Upload vulnerability
9.8
22 hours ago
Tracking Code Manager<= 2.6.0
Reflected Cross-Site Scripting vulnerability
7.1
22 hours ago
Ocean Extra<= 2.6.0
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
22 hours ago
Mang Board WP<= 2.4.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
22 hours ago
Groundhogg<= 4.5.14
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
22 hours ago
Photo Gallery by 10Web<= 1.8.42
Reflected Cross-Site Scripting vulnerability
7.1
22 hours ago
VK Blocks<= 1.126.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
23 hours ago
Post and Page Builder by BoldGrid<= 1.27.13
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
23 hours ago
Import and export users and customers<= 2.4.5
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.5
23 hours ago