The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,696
Mitigations18,125
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
FluentCart<= 1.7.0
Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
2 minutes ago
MailOptin<= 1.2.78.6
Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter vulnerability
9.8
6 minutes ago
Popup box6.4.1-6.4.2
Unauthenticated Arbitrary Shortcode Execution vulnerability
3.7
7 minutes ago
Complianz<= 7.5.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
8 minutes ago
Mang Board WP<= 2.4.4
Unauthenticated Arbitrary File Upload vulnerability
9.8
8 minutes ago
Flying Scripts: Delay JavaScript to Improve Site Speed & Performance<= 1.2.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
8 minutes ago
NotificationX<= 3.3.3
Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route vulnerability
7.1
13 minutes ago
Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing &amp; Smart Insights<= 1.9.2.1
Unauthenticated Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter vulnerability
7.1
14 minutes ago
NotificationX<= 3.3.3
Missing Authorization to Unauthenticated Arbitrary Content Injection vulnerability
5.3
36 minutes ago
Bulk Landing Page Creator for WordPress LPagery<= 3.1.0
Missing Authorization to Authenticated (Subscriber+) Arbitrary Page Creation/Modification/Deletion vulnerability
4.3
1 hour ago
Mail Mint<= 1.31.4
Authenticated (Custom+) SQL Injection vulnerability
8.5
1 hour ago
Image Hub &#8211; Free Images from Unsplash, Pixabay, Pexels, Openverse &amp; Giphy<= 1.2.0
Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML vulnerability
4.3
1 hour ago
FluentCart<= 1.7.0
Authenticated (Administrator+) SQL Injection vulnerability
7.6
1 hour ago
Dokan<= 5.2.1
Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover vulnerability
4.3
1 hour ago
WP Dark Mode<= 5.3.17
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Tutor LMS< 4.1.1
Unauthenticated Tutor Page Force-Publish and Content Overwrite vulnerability
7.5
6 hours ago
Cardinity Payment Gateway for WooCommerce3.2.6-3.4.1
Unauthenticated Arbitrary Order Payment Forgery vulnerability
5.3
6 hours ago
User Rights Access Manager<= 1.1.3
Unauthenticated Privilege Escalation vulnerability
9.8
8 hours ago
Rede Itaú for WooCommerce3.7.1-5.5.2
Unauthenticated Order Status Manipulation vulnerability
5.3
10 hours ago
Rede Itaú for WooCommerce< 5.5.3
Unauthenticated Order Status Manipulation vulnerability
5.3
10 hours ago