The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,271
Mitigations16,706
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
AI Engine< 3.6.6
Subscriber+ Arbitrary File Read via Audio Transcription vulnerability
6.5
2 hours ago
GeoDirectory< 2.8.168
Contributor+ User Email Disclosure via geodir_json_search_users vulnerability
4.3
2 hours ago
Slim SEO< 4.9.11
Contributor+ Arbitrary Post Meta Disclosure vulnerability
4.3
2 hours ago
AI Engine< 3.6.4
Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens vulnerability
4.9
2 hours ago
MultiVendorX< 5.0.11
Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint vulnerability
2.7
2 hours ago
AI Engine< 3.6.4
Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie vulnerability
4.8
2 hours ago
User Registration< 5.2.6
Unauthenticated Account Creation While Registration Disabled vulnerability
5.3
2 hours ago
Create Block Theme< 2.10.0
Admin+ PHP Code Injection via Pattern Save (Multisite) vulnerability
7.2
2 hours ago
WPC Name Your Price for WooCommerce< 2.2.5
Unauthenticated Price Manipulation via Select Mode vulnerability
5.3
2 hours ago
Passster< 4.3.6
Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpoint vulnerability
5.3
2 hours ago
Improve SEO<= 2.0.11
Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability
10
2 hours ago
WP Directory Kit< 1.5.5
Subscriber+ Plugin Settings and API Key Disclosure vulnerability
6.5
3 hours ago
Passster< 4.3.6
Unauthenticated Category-Locked Content Disclosure via Core REST API vulnerability
5.3
3 hours ago
WP Directory Kit< 1.5.5
Subscriber+ Contact Message and User Data Disclosure vulnerability
4.3
3 hours ago
WP Directory Kit< 1.5.5
Subscriber+ User and Unpublished Listing Disclosure vulnerability
4.3
3 hours ago
Admin Safety Guard< 1.4.0
Unauthenticated User Data Disclosure via 2fa/app/users REST Route vulnerability
5.3
3 hours ago
Dokan< 5.0.11
Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint vulnerability
5.4
3 hours ago
Dokan< 5.0.9
Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint vulnerability
4.3
3 hours ago
Dokan< 5.0.9
Vendor+ Cross-Vendor Product Attribute Modification via Product Attribute REST API vulnerability
4.3
3 hours ago
Academy LMS< 3.8.3
Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST Endpoint vulnerability
4.3
3 hours ago