The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total39,242
Mitigations14,546
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Formidable Forms<= 6.28
Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter vulnerability
5.3
1 day ago
Formidable Forms<= 6.28
Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse vulnerability
7.5
1 day ago
Simply Schedule Appointments<= 1.6.9.29
Missing Authorization to Unauthenticated Sensitive Information Exposure via Settings REST API Endpoint vulnerability
7.5
1 day ago
Pix for WooCommerce<= 1.5.0
Unauthenticated Arbitrary File Upload vulnerability
10
1 day ago
Calculated Fields Form<= 5.4.5.0
Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings vulnerability
6.5
1 day ago
Social Icons Widget & Block by WPZOOM<= 4.5.8
Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creation vulnerability
4.3
1 day ago
GetGenie<= 4.3.2
Insecure Direct Object Reference to Authenticated (Author+) Stored Cross-Site Scripting via REST API vulnerability
5.9
1 day ago
GetGenie<= 4.3.2
Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Post Overwrite/Deletion vulnerability
5.4
1 day ago
Simply Schedule Appointments<= 1.6.9.29
Insecure Direct Object Reference to Authenticated (Staff+) Sensitive Information Exposure vulnerability
4.3
1 day ago
Reading progressbar< 1.3.1
Admin+ Stored XSS vulnerability
5.9
1 day ago
Timetics< 1.0.52
Unauthenticated Payment/Booking Status Update vulnerability
4.3
1 day ago
WOLF<= 1.0.8.7
SQL Injection vulnerability
7.6
2 days ago
RegistrationMagic<= 6.0.7.1
Account Takeover vulnerability
8.1
2 days ago
Everest Forms Pro<= 1.9.10
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
WPCafe<= 3.0.6
Broken Access Control vulnerability
9.1
2 days ago
Simple Ajax Chat<= 20260217
Unauthenticated Stored Cross-Site Scripting via 'c' vulnerability
7.1
2 days ago
PixelYourSite PRO<= 12.4.0.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
PixelYourSite – Your smart PIXEL (TAG) Manager<= 11.2.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
DukaPress<= 3.2.4
Reflected XSS vulnerability
7.1
2 days ago
WP Front User Submit / Front Editor< 5.0.6
Unauthenticated Sensitive Information Exposure vulnerability
5.9
2 days ago