The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,449
Mitigations16,340
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Ecwid Shopping Cart< 7.0.9
Subscriber+ Store Disconnection via 'ec_disconnect' Action vulnerability
5.4
9 minutes ago
Email Verification for WooCommerce< 3.2.6
Unauthenticated Account Takeover via Type-Juggling Authentication Bypass vulnerability
9.8
12 minutes ago
ShopEngine< 4.9.3
Customer PII Disclosure via Forced Authentication vulnerability
5.4
12 minutes ago
Amelia< 2.4.6
Provider+ Cross-Customer Appointment Data Disclosure via IDOR vulnerability
4.3
13 minutes ago
WP Helper Premium< 4.7.6
Unauthenticated Order Data Disclosure and Order Manipulation via Missing Order Key Validation vulnerability
5.3
14 minutes ago
Food Menu – Restaurant Menu & Online Ordering for WooCommerce< 6.0.2
Unauthenticated Reservation Status Modification vulnerability
5.3
22 minutes ago
PPWP<= 1.9.21
WordPress PPWP - Password Protect Pages plugin <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
6.5
23 minutes ago
FluentForm<= 6.2.11
Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values vulnerability
7.1
24 minutes ago
Prevent Direct Access<= 2.8.8.8
WordPress Prevent Direct Access - Protect WordPress Files plugin <= 2.8.8.8 - Unauthenticated Protected File Access vulnerability
5.3
32 minutes ago
Quick Paypal Payments<= 5.7.50
Unauthenticated Payment Bypass via PayPal IPN vulnerability
5.3
39 minutes ago
Payment Button for PayPal<= 1.2.3.44
Unauthenticated Payment Price Manipulation vulnerability
5.3
40 minutes ago
Payment Gateway for PayPal on WooCommerce< 9.2.1
Unauthenticated Payment Bypass via PayPal Advanced Return Handler vulnerability
5.3
43 minutes ago
Welcart e-Commerce< 2.11.33
Unauthenticated Payment Bypass via Forged Settlement Callback vulnerability
5.3
44 minutes ago
Wallet System for WooCommerce< 2.7.10
Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount vulnerability
4.3
45 minutes ago
Royal Elementor Addons< 1.7.1065
Contributor+ Stored XSS via Icon Box Widget vulnerability
6.5
46 minutes ago
Order Sync with Zendesk for WooCommerce< 2.2.3
Unauthenticated Customer Order Data Disclosure vulnerability
5.3
47 minutes ago
ProSolution WP Client< 2.0.9
Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls vulnerability
4.3
48 minutes ago
WP Photo Album Plus< 9.2.09.002
Subscriber+ Cross-Album File Upload via Missing Authorization vulnerability
4.3
49 minutes ago
WooCommerce Subscriptions< 9.1.0
Unauthenticated RCE via PHP Object Injection vulnerability
10
50 minutes ago
Events Manager< 7.4.1
Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability
3.1
1 hour ago