The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,094
Mitigations16,097
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light<= 2.4.37
Missing Authorization to Unauthenticated Privilege Escalation vulnerability
9.8
18 minutes ago
MountDev AI MCP Connector for WordPress<= 1.6.1
Unauthenticated Privilege Escalation vulnerability
9.8
25 minutes ago
SAML SP Single Sign On<= 5.4.4
Unauthenticated Authentication Bypass vulnerability
9.8
31 minutes ago
WPForms Pro<= 1.10.1.1
Unauthenticated Arbitrary File Write vulnerability
9
40 minutes ago
EventON Action User<= 2.5.14
Missing Authorization to Unauthenticated Privilege Escalation vulnerability
7.3
1 hour ago
SMS Alert Order Notifications<= 3.9.7
Unauthenticated Authentication Bypass to Account Takeover vulnerability
9.8
1 hour ago
WP Password Policy<= 3.7.1
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
1 hour ago
Eazy Plugin Manager<= 4.4.1
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
1 hour ago
TrueBooker< 1.2.4
Unauthenticated Account Takeover vulnerability
9.8
1 hour ago
BookingPress Appointment Booking Pro< 5.7.3
Unauthenticated Customer PII Disclosure and Booking Tampering vulnerability
8.2
1 hour ago
Subscriptions for WooCommerce<= 2.0.0
Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation vulnerability
7.2
10 hours ago
mathlive<= 0.109.2
NPM: mathlive's Lack of Escaping of HTML allows for XSS
6.3
14 hours ago
@aws/agentcore>= 0.3.0-preview.7.0, <= 0.3.0-preview.9.0
NPM: AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping
9
16 hours ago
@dynatrace-oss/dynatrace-mcp-server< 1.8.7
NPM: @dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate
3.7
16 hours ago
Improved Save Button<= 1.2.1
Authenticated (Author+) Second-Order SQL Injection vulnerability
8.5
17 hours ago
swagger-typescript-api<= 13.12.1
NPM: swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies
8.3
17 hours ago
swagger-typescript-api<= 13.12.1
NPM: swagger-typescript-api vulnerable to code injection via unescaped enum string values
8.3
17 hours ago
swagger-typescript-api<= 13.12.1
NPM: swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template
8.3
17 hours ago
swagger-typescript-api<= 13.12.1
NPM: swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
6.1
17 hours ago
swagger-typescript-api<= 13.12.1
NPM: swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template
8.3
17 hours ago