The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,849
Mitigations16,556
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
GetPaid< 2.8.55
Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification vulnerability
5.3
5 minutes ago
wpForo Forum< 3.1.3
Subscriber+ Account Status and Reputation Manipulation via Profile Update Mass Assignment vulnerability
4.3
6 minutes ago
Redsys for WooCommerce Light< 7.0.2
Unauthenticated Payment Confirmation via Unverified Inespay Callback vulnerability
5.3
7 minutes ago
WP Travel Engine< 6.8.2
Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verification vulnerability
5.3
8 minutes ago
Builderall Builder for WordPress< 3.0.2
Unauthenticated OAuth Access Token Poisoning via Public REST Routes vulnerability
3.7
10 minutes ago
Google Analytics by Monster Insights< 11.1.0
Unauthenticated Measurement Protocol Secret Update via Empty-Key HMAC Bypass vulnerability
3.7
12 minutes ago
EmbedPress< 4.6.1
Unauthenticated Blind SSRF vulnerability
7.2
12 minutes ago
Formidable Forms< 6.32.1
Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status vulnerability
5.3
14 minutes ago
Integrate PhonePe with WooCommerce<= 1.2.1
Unauthenticated Payment Bypass via Transaction ID Reuse vulnerability
5.3
15 minutes ago
Passster< 4.3.7
Contributor+ Protected Content Disclosure via Core REST API vulnerability
4.3
16 minutes ago
ShopSmart Loyalty for WooCommerce<= 1.0.0
Unauthenticated Sensitive Information Disclosure via shopsmart_check_phone vulnerability
5.3
18 minutes ago
Visualizer< 4.0.7
Contributor+ Cross-User Chart Configuration Disclosure vulnerability
4.3
21 minutes ago
Extra Product Options Builder for WooCommerce< 1.2.176
Unauthenticated Customer File Disclosure via getpublicfileupload vulnerability
3.7
21 minutes ago
WPvivid Backup and Migration< 0.9.131
Unauthenticated Path Traversal via send_to_site_connect vulnerability
3.7
22 minutes ago
Simple JWT Login< 3.6.8
Unauthenticated Account Takeover via Missing Google id_token Audience Validation vulnerability
9.8
36 minutes ago
CatFolders Document Gallery & PDF Library< 2.0.7
Unauthenticated Attachment Disclosure via REST API vulnerability
3.7
37 minutes ago
Solace Extra<= 1.6.0
Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action vulnerability
9.1
41 minutes ago
Masteriyo - LMS< 2.3.3
Instructor+ Stored XSS via Quiz Description vulnerability
6.5
41 minutes ago
WPDM – Premium Packages< 7.0.7
WordPress Premium Packages - Sell Digital Products Securely plugin < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal Request vulnerability
4.3
41 minutes ago
ECS – Ele Custom Skin for Elementor< 4.3.10
Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source vulnerability
4.3
42 minutes ago