The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,437
Mitigations17,088
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Paid Member Subscriptions< 3.0.9
Unauthenticated Membership Payment Bypass vulnerability
5.3
27 minutes ago
Autopay< 5.0.1
Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion vulnerability
6.5
27 minutes ago
Robokassa payment gateway for Woocommerce< 1.8.9
Unauthenticated Payment Bypass vulnerability
3.7
27 minutes ago
RestroPress<= 3.4.6
Unauthenticated Order Enumeration and Order Note Modification vulnerability
6.5
27 minutes ago
Hide My WP Ghost7.0.10
Unauthenticated Firewall, Threat Detection and URL Hiding Bypass vulnerability
5.3
28 minutes ago
Hide My WP Ghost< 7.0.11
Unauthenticated URL Hiding Bypass vulnerability
5.3
28 minutes ago
Clean Login< 1.19
Unauthenticated CAPTCHA Bypass vulnerability
5.3
28 minutes ago
Price Drop Alert for WooCommerce<= 1.1
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Login/Signup Popup< 4.0.2
Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header vulnerability
8.1
2 hours ago
WCFM Marketplace<= 3.8.2
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Login/Signup Popup< 4.0.2
Unauthenticated Account Takeover via Password Reset Code Brute Force vulnerability
8.1
3 hours ago
InfiniteWP Client< 1.13.6
Unauthenticated Administrator Account Takeover on Multisite vulnerability
8.1
3 hours ago
SoftMarket — Digital Marketplace<= 1.0.0
Unauthenticated Account Takeover via Email Verification Bypass vulnerability
9.8
4 hours ago
To Do List Member1.4-1.6
Unauthenticated Stored XSS, File Listing and Deletion vulnerability
8.8
4 hours ago
PuppyFW<= 0.4.4
Subscriber+ Arbitrary Blog Options Update and Deletion Leading to Privilege Escalation vulnerability
8.8
4 hours ago
Out-of-the-Box2.0-3.8.3
WordPress WP Cloud Plugins - Dropbox (Out-of-the-Box) plugin 2.0-3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
4 hours ago
Lets-Box2.0-3.8.3
WordPress WP Cloud Plugins - Box (Lets-Box) plugin 2.0-3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
4 hours ago
Share-one-Drive2.0-3.8.3
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
4 hours ago
Use-your-Drive2.0-3.8.3
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
4 hours ago
wpShopGermany IT-RECHT KANZLEI1.6-2.3
Unauthenticated RCE vulnerability
9
4 hours ago