The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,881
Mitigations16,573
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
TranslatePress<= 3.2.5
WordPress TranslatePress - Translate Multilingual sites with AI Translation plugin <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
51 minutes ago
EWWW Image Optimizer<= 8.7.3
Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content vulnerability
6.5
1 hour ago
WP Statistics<= 14.16.8
Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter vulnerability
7.1
1 hour ago
Atarim<= 5.1.1
Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Meta vulnerability
8.1
1 hour ago
TrueBooker<= 1.2.6
Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter vulnerability
9.8
1 hour ago
Speed Optimizer<= 7.8.0
Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes vulnerability
6.5
1 hour ago
PPWP<= 1.9.15
Improper Authorization To Authenticated (Contributor+) Master Password Exposure vulnerability
4.3
1 hour ago
Tourmaster< 5.4.9
Unauthenticated Sensitive Data Disclosure via Order Export vulnerability
5.3
1 hour ago
Vitepos< 3.6.0
Outlet Manager+ Privilege Escalation vulnerability
7.2
1 hour ago
Vitepos< 3.6.0
Outlet Manager+ Privilege Escalation vulnerability
7.2
1 hour ago
Amelia< 9.7
Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR vulnerability
3.8
1 hour ago
AutoNetTV Relay< 3.0.14
Unauthenticated Privilege Escalation via Scheduled Sync Cron vulnerability
8.1
1 hour ago
HT Contact Form 7< 2.9.3
Unauthenticated Saved Form Draft Data Disclosure vulnerability
3.7
1 hour ago
WP Events Manager< 2.2.5
Subscriber+ Payment Bypass via 'qty' Parameter vulnerability
4.3
1 hour ago
SEO Redirection< 9.19
WordPress SEO Redirection Plugin - 301 Redirect Manager plugin < 9.19 - Subscriber+ Redirect Rule Disclosure vulnerability
5.3
1 hour ago
Payment Plugins for PayPal WooCommerce< 2.0.20
Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order vulnerability
5.3
1 hour ago
SiteGround Security< 1.6.5
WordPress Security Optimizer - The All-In-One Protection Plugin plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password vulnerability
5.3
1 hour ago
Buckaroo Woocommerce Payments Plugin< 4.9.0
Subscriber+ Unauthorized Order Refund vulnerability
5.3
1 hour ago
Essential Blocks for Gutenberg< 6.4.0
Unauthenticated WooCommerce Sales Data Disclosure via REST products Endpoint vulnerability
5.3
1 hour ago
Essential Blocks for Gutenberg< 6.4.0
Unauthenticated Non-Public Custom Post Type Content Disclosure via queries Endpoint vulnerability
5.3
1 hour ago