The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,094
Mitigations16,112
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Backup and Restore<= 1.0.3
Authenticated (Subscriber+) Arbitrary File Deletion vulnerability
7.7
16 minutes ago
Baggage Freight Shipping Australia<= 0.1.0
Arbitrary File Upload vulnerability
10
17 minutes ago
IMDb Profile Widget<= 1.0.8
Unauthenticated Local File Inclusion vulnerability
8.1
19 minutes ago
Mac Photo Gallery<= 3.0
Unauthenticated Arbitrary File Deletion vulnerability
8.6
21 minutes ago
HB Audio Gallery Lite<= 1.0.0
Unauthenticated Arbitrary File Download vulnerability
7.5
25 minutes ago
Background Image Cropper<= 1.2
Unauthenticated Remote Code Execution vulnerability
10
32 minutes ago
Admin and Site Enhancements (ASE) Pro<= 8.9.0
Unauthenticated Remote Code Execution vulnerability
10
36 minutes ago
Backup by Supsystic<= 2.3.9
Unauthenticated Local File Inclusion vulnerability
8.1
45 minutes ago
Apptha Slider Gallery<= 1.0
Unauthenticated Arbitrary File Download vulnerability
7.5
51 minutes ago
Simple Fields<= 0.3.5
Unauthenticated Local File Inclusion vulnerability
8.1
55 minutes ago
WordPress Social Login and Register< 7.8.0
Unauthenticated Account Takeover vulnerability
9.8
1 hour ago
Streamit<= 4.5.0
Unauthenticated Remote Code Execution vulnerability
10
2 hours ago
WP Media folder Addon<= 4.1.6
Unauthenticated Arbitrary File Download vulnerability
7.5
2 hours ago
Extra Checkout Options - addon for Extra Product Options plugin<= 2.3.2
WordPress Extra Checkout Options - addon for Extra Product Options plugin plugin <= 2.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload in eco_save_settings vulnerability
8.8
3 hours ago
Cost Calculator Builder Pro<= 4.0.3
Unauthenticated Remote Code Execution vulnerability
10
3 hours ago
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light<= 2.4.37
Missing Authorization to Unauthenticated Privilege Escalation vulnerability
9.8
4 hours ago
MountDev AI MCP Connector for WordPress<= 1.6.1
Unauthenticated Privilege Escalation vulnerability
9.8
4 hours ago
SAML SP Single Sign On<= 5.4.4
Unauthenticated Authentication Bypass vulnerability
9.8
4 hours ago
WPForms Pro<= 1.10.1.1
Unauthenticated Arbitrary File Write vulnerability
9
4 hours ago
EventON Action User<= 2.5.14
Missing Authorization to Unauthenticated Privilege Escalation vulnerability
7.3
4 hours ago