The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,313
Mitigations16,720
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
libreoffice-convert< 1.8.2
NPM: libreoffice-convert vulnerable to path traversal / arbitrary file write
6.5
23 minutes ago
n8n-nodes-sqlite3< 1.0.0
NPM: n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)
6.1
39 minutes ago
FoodBoxBooker< 1.0.7
Unauthenticated Arbitrary Password Reset vulnerability
9.8
4 hours ago
AI Engine3.3.3-3.7.1
WordPress AI Engine plugin 3.3.3-3.7.2 - 3.7.1 - Subscriber+ Arbitrary File Read vulnerability
7.5
4 hours ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Read vulnerability
7.5
4 hours ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Deletion vulnerability
8.6
5 hours ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Upload vulnerability
9.9
5 hours ago
WpEvently<= 5.5.0
Broken Access Control vulnerability
4.3
5 hours ago
WpEvently<= 5.5.0
Broken Access Control vulnerability
5.4
5 hours ago
WP Job Portal<= 2.5.9
Insecure Direct Object References (IDOR) vulnerability
4.3
5 hours ago
RestrictMate< 1.3.0
Unauthenticated Privilege Escalation to Administrator vulnerability
9.8
5 hours ago
WPCargo Track & Trace< 8.0.4
Unauthenticated SQL Injection via wpcargo_tracking_number vulnerability
9.3
5 hours ago
ACF Extended<= 0.9.2.6
Broken Access Control vulnerability
4.3
6 hours ago
All-in-One Video Gallery< 4.9.2
Subscriber+ Server-Side Request Forgery via 'vdl' Parameter vulnerability
6.4
6 hours ago
Forminator< 1.57.0.5
Admin+ Network-Wide RCE via Hub Connector API Key on Multisite vulnerability
7.2
6 hours ago
MC4WP<= 4.12.0
Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages vulnerability
5.9
6 hours ago
Post Duplicator<= 3.0.11
Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution vulnerability
4.3
6 hours ago
Advanced Classifieds & Directory Pro< 3.4.3
Unauthenticated Non-Public Listing Custom Field Disclosure vulnerability
5.3
6 hours ago
Block User Account< 2.0.1
Subscriber+ Account Block Bypass via Application Passwords vulnerability
5.4
6 hours ago
Contact Form to Any API< 3.0.7
Unauthenticated Sensitive File Disclosure via Predictable Filename vulnerability
5.3
6 hours ago