The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,737
Mitigations19,212
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
isomorphic-git<= 1.38.5
npm: isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)
4.3
4 minutes ago
isomorphic-git<= 1.38.5
npm: isomorphic-git: Arbitrary file write outside of working tree via directory symlink during checkout (potential RCE)
8.8
9 minutes ago
Fusion Builder<= 3.16.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
15 minutes ago
ARMember Premium<= 7.8.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
15 minutes ago
Ultimate Addons for Contact Form 7<= 3.5.54
Unauthenticated Arbitrary File Read vulnerability
7.5
15 minutes ago
Multilingual CMS<= 4.9.7
Unauthenticated Authentication Bypass in Language-per-Domain SSO vulnerability
8.1
44 minutes ago
Extend B2B - Companies and Users Management for WooCommerce<= 2.1.4
WordPress Extend B2B - Companies and Users Management for WooCommerce plugin <= 2.1.4 - Unauthenticated Sensitive Information Exposure in /wp/v2/aio_company REST Endpoint vulnerability
5.3
3 hours ago
JWT Auth<= 3.0.2
Unauthenticated Account Access Persistence vulnerability
8.1
7 hours ago
FraudLabs Pro SMS Verification1.11.2-1.12.1
Unauthenticated SMS Verification Bypass vulnerability
5.3
7 hours ago
Confection WordPress Cable0.4.0-0.4.7
Unauthenticated RCE vulnerability
10
7 hours ago
WP Duplicate<= 1.1.11
Unauthenticated Arbitrary File Upload vulnerability
10
9 hours ago
Userplace<= 1.2.0
Unauthenticated Privilege Escalation vulnerability
9.8
9 hours ago
Ecommerce Affiliate<= 1.0.0
Unauthenticated Account Takeover vulnerability
8.1
9 hours ago
Advanced Appointment Booking &amp; Scheduling< 2.7
Unauthenticated Arbitrary User Registration vulnerability
5.3
10 hours ago
EASY-JS-WPAPI Client HANDLE for the WordPress REST-API<= 2.0
Unauthenticated Administrator Password Disclosure and Authentication Bypass vulnerability
9.8
10 hours ago
WP BASE Booking6.5.0-6.5.0
Subscriber+ Privilege Escalation vulnerability
8.8
10 hours ago
Mail Debug for WooCommerce<= 1.3.0
Unauthenticated Sent Email Disclosure Leading to Account Takeover vulnerability
7.5
10 hours ago
Grand Job<= 1.2.1
Unauthenticated Account Takeover vulnerability
9.8
10 hours ago
mView 豆瓣电影<= 1.0.3
Subscriber+ Arbitrary File Upload vulnerability
9.9
10 hours ago
AZEXO Store Locator<= 1.4
Subscriber+ Arbitrary File Write vulnerability
9.9
10 hours ago