The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,072
Mitigations17,011
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
bbPress<= 2.6.14
Sensitive Data Exposure vulnerability
5.3
11/09/2026
WP-Members<= 3.5.6
Reflected Cross-Site Scripting vulnerability
7.1
54 minutes ago
Registration Form for WooCommerce1.1.0-1.1.2
Contributor+ Privilege Escalation vulnerability
8.8
59 minutes ago
Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons< 3.3.3
Unauthenticated Stored XSS vulnerability
7.1
59 minutes ago
Advanced Customized Prompts<= 1.0.1
Subscriber+ Stored XSS vulnerability
6.5
1 hour ago
MultiVendorX5.0.0-5.0.15
Store Owner+ Privilege Escalation to Administrator vulnerability
7.2
1 hour ago
Visualizer< 4.0.6
Contributor+ Arbitrary Chart Deletion vulnerability
5.4
1 hour ago
WPCafe3.0.10-3.0.17
Unauthenticated Order Disclosure and Modification vulnerability
6.5
1 hour ago
المنتور فارسی2.7.10-2.8.1
Unauthenticated ZarinPal Payment Callback Authority Bypass vulnerability
5.3
1 hour ago
miniOrange's Google Authenticator18.0-19.2
Unauthenticated Arbitrary Option Deletion vulnerability
9.3
1 hour ago
miniOrange's Google Authenticator5.3.24-6.3.0
Unauthenticated Arbitrary Option Deletion vulnerability
9.3
1 hour ago
Teddy Bear Customize Addon<= 1.0.5
Unauthenticated Arbitrary File Upload vulnerability
10
1 hour ago
Teddy Bear Customize Addon<= 1.0.5
Unauthenticated Account Takeover vulnerability
9.8
1 hour ago
Advanced Customized Prompts<= 1.0.1
Unauthenticated Account Takeover vulnerability
9.8
1 hour ago
miniOrange's Google Authenticator18.0-19.2
2FA Bypass vulnerability
7.5
1 hour ago
miniOrange's Google Authenticator6.2.8-6.3.0
2FA Bypass vulnerability
7.5
1 hour ago
Metform< 4.1.9
Unauthenticated Email Header Injection vulnerability
4.8
4 hours ago
Payment Gateway PayPay for WooCommerce0.5-0.9.3
Unauthenticated Payment Bypass vulnerability
3.7
4 hours ago
Nexi XPay Build7.6.1-7.6.2
Unauthenticated Saved Payment Token Disclosure vulnerability
5.3
4 hours ago
Kirki<= 6.2.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago