The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,339
Mitigations19,019
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
CatFolders< 2.5.7
Subscriber+ Folder Ownership Reset and User Restriction Disable vulnerability
3.1
1 hour ago
CatFolders< 2.5.7
Author+ SQLi vulnerability
8.5
1 hour ago
Dokan< 5.3.3
Admin+ Cross-Site Vendor Activation vulnerability
4.3
1 hour ago
Dokan< 5.3.3
Unauthenticated Email Sender Spoofing vulnerability
5.3
1 hour ago
Easy Social Icons< 4.0.3
Author+ Stored XSS vulnerability
6.5
1 hour ago
Car Dealer<= 4.73
Unauthenticated Private/Draft/Pending Post Content Disclosure vulnerability
5.3
1 hour ago
Easy Social Icons< 4.0.3
Admin+ Stored XSS vulnerability
3.5
1 hour ago
Subscriptions for WooCommerce2.0.0-2.1.0
Unauthenticated Membership Content Restriction Bypass vulnerability
5.3
1 hour ago
Community Events< 1.6.0
Unauthenticated Pending Events Disclosure vulnerability
5.3
1 hour ago
Tutor LMS< 4.2.0
Subscriber+ Quiz Answer Key Disclosure vulnerability
4.3
1 hour ago
FV Flowplayer Video Player< 7.5.56.7212
Contributor+ SSRF vulnerability
5
1 hour ago
FV Flowplayer Video Player< 7.5.56.7212
Contributor+ Stored XSS vulnerability
6.5
1 hour ago
FV Flowplayer Video Player< 7.5.56.7212
Subscriber+ Cloud Storage File Disclosure vulnerability
4.3
1 hour ago
GiveWP<= 4.19.1
Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter vulnerability
8.8
11 hours ago
Motors<= 1.4.128
Authenticated (Subscriber+) File Deletion vulnerability
8.1
11 hours ago
LiteSpeed Cache<= 7.9.1
Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) vulnerability
7.5
11 hours ago
@payloadcms/storage-vercel-blob>= 3.25.0, < 3.90.0
npm: @payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter
4.3
14 hours ago
odf-kit>= 0.6.0, < 0.14.2
npm: odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values
6.1
15 hours ago
Customer Reviews for WooCommerce<= 5.126.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
15 hours ago
Redux Framework<= 4.5.16
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.5
16 hours ago