The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,950
Mitigations16,598
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Wawp<= 4.8.6
Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure vulnerability
9.8
6 hours ago
WPForms Pro<= 2.0.0.2
Unauthenticated Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field Values vulnerability
7.1
6 hours ago
JSON Options<= 0.0.4
Unauthenticated Arbitrary Options Update vulnerability
9.8
6 hours ago
Depicter Slider< 4.8.0
Editor+ Arbitrary File Upload via ZIP Import vulnerability
9.1
6 hours ago
Kirki< 6.2.3
Editor+ Stored XSS via Font Zip Upload vulnerability
6.5
6 hours ago
GutenKit<= 2.4.15
Contributor+ Mailchimp Audience Data Disclosure vulnerability
4.3
6 hours ago
Admin and Site Enhancements (ASE)< 9.0.1
Author+ Stored XSS via SVG Upload over XML-RPC vulnerability
5.9
6 hours ago
GutenKit< 2.5.0
Author+ Stored XSS via SVG Upload vulnerability
5.9
6 hours ago
Royal Elementor Addons< 1.7.1066
Admin+ Remote Code Execution via Widget Builder vulnerability
7.2
6 hours ago
SG AI Studio<= 1.2.7
Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint vulnerability
4.3
6 hours ago
Events Made Easy<= 3.2.5
Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property vulnerability
7.5
7 hours ago
Membership For WooCommerce< 3.1.2
Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass vulnerability
5.3
7 hours ago
WPS Bidouille< 1.33.5
Subscriber+ User Email Disclosure via wps_get_users vulnerability
5.3
7 hours ago
KiviCare< 4.5.4
Patient+ Arbitrary Media Attachment Read via IDOR vulnerability
4.3
7 hours ago
KiviCare< 4.5.4
Patient+ Cross-Patient Appointment Modification via IDOR vulnerability
4.3
7 hours ago
Easy Appointments< 4.0.1
Contributor+ Sensitive Information Disclosure via REST Appointments Listing vulnerability
4.3
7 hours ago
Broken Link Checker< 2.4.12
Unauthenticated RCE via Query Variable Injection vulnerability
10
7 hours ago
TrueBooker< 1.2.7
Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked vulnerability
5.3
7 hours ago
TrueBooker< 1.2.7
Unauthenticated Customer PII Disclosure via Multiple AJAX Actions vulnerability
5.3
7 hours ago
TrueBooker< 1.2.7
Unauthenticated Account Takeover via Multiple AJAX Actions vulnerability
9.8
7 hours ago