The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,856
Mitigations18,203
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
LatePoint<= 5.7.4
Unauthenticated Authentication Bypass vulnerability
9.1
3 hours ago
WP Booking System<= 2.1.0.3
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
6.5
3 hours ago
User Registration<= 5.2.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
WooCommerce EU VAT Assistant<= 2.1.30.260413
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
@aborruso/ckan-mcp-server< 0.4.112
NPM: ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
3.1
3 hours ago
LearnPress<= 4.4.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
LearnPress<= 4.4.10
Unauthenticated PHP Object Injection vulnerability
9.8
3 hours ago
WP Booking System<= 2.1.0.3
Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability
6.8
3 hours ago
WP Booking System<= 2.1.0.3
Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
3 hours ago
Tutor LMS<= 4.1.0
Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Course Modification and Ownership Takeover vulnerability
4.3
7 hours ago
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN<= 1.4.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
7 hours ago
Post Export Import with Media<= 1.17.2
Authenticated (Administrator+) Path Traversal vulnerability
4.9
7 hours ago
User Registration<= 5.2.8
Cross-Site Request Forgery to trigger_bulk_action() vulnerability
4.3
7 hours ago
Themify Popup<= 1.4.7
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
6.4
7 hours ago
Themify Builder<= 7.8.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
7 hours ago
Welcart e-Commerce<= 2.12.4
Authenticated (Editor+) SQL Injection vulnerability
4.9
7 hours ago
LatePoint<= 5.7.4
Unauthenticated Sensitive Information Disclosure vulnerability
3.7
8 hours ago
Kirki<= 6.3.2
Authenticated (Administrator+) PHP Object Injection vulnerability
7.2
8 hours ago
aThemeArt Theme Helper<= 1.0.8
Cross Site Request Forgery (CSRF) vulnerability
8.8
9 hours ago
Passster<= 4.3.18
Broken Access Control vulnerability
5.3
9 hours ago