The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,924
Mitigations16,591
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
W3 Total Cache< 2.10.5
Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key vulnerability
9.8
7 minutes ago
TabaPay Gateway<= 1.4.0
Unauthenticated Account Takeover via Payment Callback vulnerability
9.8
23 minutes ago
Product Shortlist<= 1.0.4
Unauthenticated SQL Injection via get_shortlisted_products vulnerability
9.3
26 minutes ago
SmartCrawl< 3.16.3
Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration vulnerability
4.3
31 minutes ago
Simple File List<= 6.3.11
Unauthenticated Stored XSS via File Description vulnerability
7.1
33 minutes ago
Simple File List<= 6.3.11
Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability
7.5
36 minutes ago
User Verification<= 2.0.47
Unauthenticated Arbitrary Account Lockout via IDOR vulnerability
7.5
43 minutes ago
Easy Media Replace<= 0.2.0
Author+ Stored XSS via Attachment Title vulnerability
5.9
46 minutes ago
YayCurrency< 3.3.5
Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration vulnerability
5.3
46 minutes ago
Quiz And Survey Master< 11.2.4
Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR vulnerability
4.3
49 minutes ago
Quiz And Survey Master< 11.2.4
Contributor+ Arbitrary Quiz Text Settings Update via IDOR vulnerability
4.3
50 minutes ago
Booking calendar, Appointment Booking System<= 3.2.36
Unauthenticated Stored XSS via SVG File Upload vulnerability
7.1
52 minutes ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer< 2.33.5
Unauthenticated Stored XSS via Critical CSS Token Bypass vulnerability
4.7
1 hour ago
WCFM Marketplace< 3.8.1
Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR vulnerability
4.3
1 hour ago
Dinatur<= 1.18
Unauthenticated SQL Injection via Column Name Injection vulnerability
9.3
1 hour ago
WP Event SOlution< 4.1.21
Contributor+ Schedule Deletion and Modification via IDOR vulnerability
4.3
1 hour ago
WP Event SOlution< 4.1.21
Contributor+ User Role and Meta Modification via Speaker Creation vulnerability
4.3
1 hour ago
WP Event SOlution< 4.1.21
Contributor+ Speaker Account Deletion via IDOR vulnerability
4.3
1 hour ago
WP Event SOlution< 4.1.21
Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR vulnerability
5.4
1 hour ago
Gift Cards For WooCommerce Pro< 4.2.10
Unauthenticated Arbitrary File Upload vulnerability
10
1 hour ago