The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,633
Mitigations18,098
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform< 2.17.2
Unauthenticated LFI vulnerability
8.6
5 minutes ago
CamPay Shortcode Payment Gateway< 1.7
Unauthenticated Payment Status Forgery vulnerability
7.5
9 minutes ago
Walletdoc Payment Gateway for WooCommerce< 1.8.5
Unauthenticated SQLi and Order Payment Forgery vulnerability
9.3
10 minutes ago
Visma Pay for WooCommerce< 1.2.2
Unauthenticated Payment Bypass and Order Data Disclosure vulnerability
6.5
14 minutes ago
Meow Lightbox<= 5.6.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Responsive Blocks< 2.3.0
Unauthenticated HTML Injection in Form Notification Email vulnerability
5.4
1 hour ago
Tickera< 3.6.0.4
Unauthenticated Order Payment Bypass vulnerability
5.3
1 hour ago
LifterLMS<= 10.3.1
Authenticated (Contributor+) Local File Inclusion vulnerability
7.5
2 hours ago
GeoDirectory<= 2.8.190
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Record of Consent Extension for Complianz<= 2.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
Jeg Kit for Elementor<= 3.2.19
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
6.5
3 hours ago
GeoDirectory<= 2.8.190
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
Mang Board WP<= 2.4.3
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
NewStatPress<= 1.4.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
Contact Form DB for Enfold<= 2.0.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Verified Reviews (Avis Vérifiés)<= 2.4.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
FV Player 8<= 8.1.7
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
NewStatPress<= 1.4.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
LatePoint<= 5.7.3
Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
4 hours ago
Form Maker by 10Web<= 1.15.48
Unauthenticated SQL Injection vulnerability
7.5
4 hours ago