The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total57,025
Mitigations19,281
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
File Upload to Order< 1.1.4
Unauthenticated Arbitrary File Deletion vulnerability
10
7 minutes ago
WP Remote Users Sync< 2.3.0
Privilege Escalation to Administrator vulnerability
7.5
8 minutes ago
VibeBP<= 1.9.9.8.1
Authenticated (Subscriber+) Privilege Escalation in set_email_notification_settings() vulnerability
8.8
9 minutes ago
TI WooCommerce Wishlist< 2.0.7
Unauthenticated SQLi vulnerability
9.3
10 minutes ago
User Verification< 2.0.49
Unauthenticated Account Takeover vulnerability
8.1
11 minutes ago
Descope< 1.2.0
Unauthenticated Account Takeover vulnerability
9.8
13 minutes ago
CourseCure Courses<= 1.5.1
Authenticated (Subscriber+) Privilege Escalation to 'ajax_save_settings' Endpoint vulnerability
8.8
13 minutes ago
Masterstudy<= 4.8.151
WordPress Masterstudy - Education WordPress Theme theme <= 4.8.151 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
14 minutes ago
Clockinator Lite< 1.1.0
Unauthenticated SQLi vulnerability
9.3
26 minutes ago
Ultimate Addons for Elementor Forms< 1.0.8
Unauthenticated Arbitrary File Upload vulnerability
10
26 minutes ago
Mine CloudVod< 2.6.6
Unauthenticated Cloud Storage Credential Disclosure vulnerability
6.5
26 minutes ago
ContentPen< 1.1.1
Unauthenticated Stored XSS vulnerability
7.1
27 minutes ago
Defender Security4.9.0-6.4.0
Unauthenticated IP Address Spoofing vulnerability
5.3
42 minutes ago
Defender Security< 6.4.1
2FA Bypass vulnerability
7.5
42 minutes ago
Clockinator Lite< 1.1.0
Unauthenticated Leave Record Modification vulnerability
5.3
1 hour ago
Order Tracking< 3.6.2
Unauthenticated Customer and Sales Rep Order History Disclosure vulnerability
5.3
1 hour ago
Mine CloudVod< 2.6.6
Subscriber+ Order Information Disclosure vulnerability
4.3
1 hour ago
TI WooCommerce Wishlist< 2.13.0
Unauthenticated Wishlist Item Deletion vulnerability
5.3
1 hour ago
Abilities Bridge< 1.4.2
Administrator Account Creation vulnerability
8.8
1 hour ago
AskAny< 2.2.1
Unauthenticated Chat Session Disclosure and Modification vulnerability
4.8
1 hour ago