The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,222
Mitigations16,701
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
suneditor<= 3.1.3
NPM: SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed
8.5
18 minutes ago
@logtape/syslog< 1.3.11
NPM: @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys
8.6
1 hour ago
@budibase/server<= 3.38.1
NPM: Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`
7.1
1 hour ago
Bit Assist< 1.8.2
Unauthenticated Arbitrary File Upload via Response Endpoint vulnerability
6.5
2 hours ago
REST API Log< 1.7.1
Unauthenticated Sensitive Log Data Disclosure via Download Endpoint vulnerability
7.5
2 hours ago
Simple Google Calendar Outlook Events Block Widget< 3.1.0
Unauthenticated SSRF via calendar_id vulnerability
7.2
2 hours ago
Newsletters< 4.16
Unauthenticated Server-Side Request Forgery via SNS Bounce Handler vulnerability
7.2
2 hours ago
Personal QR Message<= 1.0
Unauthenticated Arbitrary File Upload vulnerability
10
2 hours ago
Appointment Hour Booking< 1.5.88
Unauthenticated Booking Price Manipulation via tcost Parameter vulnerability
5.3
2 hours ago
WP Maps< 4.9.7
Subscriber+ Denial of Service vulnerability
6.5
2 hours ago
Brizy< 2.8.19
WordPress Brizy - Page Builder plugin < 2.8.19 - Contributor+ Template Type Update via IDOR vulnerability
4.3
2 hours ago
Formidable Forms<= 6.33.1
Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter vulnerability
7.1
3 hours ago
WP Fastest Cache <= 1.5.0
Unauthenticated Stored Cross-Site Scripting via HTTP Host Header vulnerability
7.1
3 hours ago
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels<= 4.9.8
Authenticated (Subscriber+) Arbitrary File Read vulnerability
6.5
3 hours ago
Forminator<= 1.57.0.2
Unauthenticated Stored Cross-Site Scripting via Radio Field (Save and Continue Draft) vulnerability
7.1
4 hours ago
Forminator<= 1.57.0
Unauthenticated DOM-Based Cross-Site Scripting via 'error_description' Parameter vulnerability
7.1
4 hours ago
Ultimate Member<= 2.12.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
WooCommerce Lottery<= 2.2.9
Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters vulnerability
9.3
4 hours ago
Classified Listing - Mobile Number Verification<= 1.6.0
WordPress Classified Listing - Mobile Number Verification plugin <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login vulnerability
8.1
4 hours ago
WP ERP<= 1.17.8
Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment vulnerability
10
5 hours ago