The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,204
Mitigations16,689
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Forminator<= 1.57.0.2
Unauthenticated Stored Cross-Site Scripting via Radio Field (Save and Continue Draft) vulnerability
7.1
16 minutes ago
Forminator<= 1.57.0
Unauthenticated DOM-Based Cross-Site Scripting via 'error_description' Parameter vulnerability
7.1
25 minutes ago
Ultimate Member<= 2.12.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
29 minutes ago
WooCommerce Lottery<= 2.2.9
Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters vulnerability
9.3
37 minutes ago
Classified Listing - Mobile Number Verification<= 1.6.0
WordPress Classified Listing - Mobile Number Verification plugin <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login vulnerability
8.1
46 minutes ago
WP ERP<= 1.17.8
Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment vulnerability
10
1 hour ago
Security Hardener<= 2.4.4
Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
1 hour ago
InfusedWoo Pro<= 5.1.17
Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
1 hour ago
SmilePass Selfie Login<= 1.0.2
Unauthenticated Authentication Bypass vulnerability
9.8
1 hour ago
Social Login & Sharing buttons with Analytics By SoClever<= 1.2.0
Unauthenticated Authentication Bypass vulnerability
9.8
1 hour ago
WP Social Media Login<= 1.0.6
Unauthenticated Account Takeover vulnerability
9.8
2 hours ago
MalCare Security5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
2 hours ago
BlogVault5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
2 hours ago
The WP Remote WordPress Plugin5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
2 hours ago
CM Map Locations<= 2.1.8
Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action vulnerability
8.8
2 hours ago
Mang Board WP<= 2.3.7
Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie vulnerability
8.8
3 hours ago
Noptin< 4.3.3
Unauthenticated Subscriber PII and confirm_key Disclosure vulnerability
5.3
3 hours ago
Tutor LMS< 4.0.6
Unauthenticated SQLi vulnerability
5.3
3 hours ago
Avada<= 7.16
Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability
9.8
4 hours ago
Fusion Builder<= 3.16
Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability
9.8
4 hours ago