The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,417
Mitigations16,799
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Rest Routes – Custom Endpoints for WP REST API<= 5.5.5
Unauthenticated SQLi vulnerability
9.3
13 minutes ago
爱采集数据采集和发布插件<= 1.0.0
Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write vulnerability
7.5
18 minutes ago
Uix UserCenter<= 1.0.3
Unauthenticated Privilege Escalation vulnerability
9.8
20 minutes ago
Simple User Registration<= 6.9
Unauthenticated Privilege Escalation to Administrator vulnerability
9.8
23 minutes ago
MyHome Core<= 4.4.5
Authentication Bypass to Account Takeover vulnerability
9.8
34 minutes ago
Custom User Registration Fields for WooCommerce<= 2.2.3
Unauthenticated Privilege Escalation vulnerability
9.8
41 minutes ago
bbPress<= 2.6.14
Broken Access Control vulnerability
5.3
45 minutes ago
SigmaForms Pro – AI Generated Forms<= 1.4.5
Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability
10
1 hour ago
Customer Reviews for WooCommerce< 5.118.0
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
SAML SP Single Sign On<= 5.4.6
Unauthenticated Authentication Bypass vulnerability
7.5
1 hour ago
Really Simple SSL< 9.8.0
Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability
9.1
1 hour ago
HEL Online Classroom: AI-powered Online Classrooms<= 1.0.3
Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass vulnerability
5.3
1 hour ago
MStore API< 4.21.1
Subscriber+ Arbitrary Order Payment Bypass vulnerability
4.3
1 hour ago
爱采集数据采集和发布插件<= 1.0.0
Unauthenticated User and Term Creation vulnerability
5.3
6 hours ago
MW WP Form< 5.1.6
Editor+ Stored XSS vulnerability
5.9
1 day ago
WPvivid Backup and Migration< 0.9.133
Admin+ Arbitrary File Write vulnerability
9.1
1 day ago
SOGO Add Script to Individual Pages Header Footer<= 3.9
Contributor+ Stored XSS vulnerability
6.5
1 day ago
WP Ultimate CSV Importer< 9.0
Admin+ SQLi vulnerability
7.6
2 days ago
MasterStudy LMS< 3.7.43
Unauthenticated Open Redirect vulnerability
4.7
2 days ago
WP Full Stripe Free< 8.5.5
Cross-Customer Subscription Cancellation vulnerability
4.3
2 days ago