The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total48,862
Mitigations15,774
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
LearnPress<= 4.3.9.1
Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
6.5
5 minutes ago
Custom Payment Gateways for WooCommerce<= 2.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 minutes ago
ChatBot<= 8.4.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 minutes ago
WP Google Review Slider<= 18.1
Reflected Cross-Site Scripting vulnerability
7.1
26 minutes ago
Webmention<= 5.8.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
32 minutes ago
Ninja Forms<= 3.14.1
Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
37 minutes ago
BookingPress Appointment Booking Pro<= 5.7.1
Unauthenticated SQL Injection vulnerability
9.3
44 minutes ago
WP-BusinessDirectory<= 4.0.1
Unauthenticated Arbitrary File Deletion vulnerability
8.6
52 minutes ago
Taskbuilder<= 5.0.8
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
1 hour ago
Taskbuilder<= 5.0.8
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
1 hour ago
Visualizer<= 4.0.3
Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
1 hour ago
SMS Alert Order Notifications<= 3.9.5
Unauthenticated Privilege Escalation vulnerability
9.8
1 hour ago
YouTube Showcase<= 4.0.3
Authenticated (Subscriber+) Arbitrary Function Call vulnerability
7.5
1 hour ago
WP Photo Album Plus<= 9.1.13.005
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
13 hours ago
MotoPress Appointment Booking<= 2.4.5
Authenticated (Staff+) SQL Injection vulnerability
8.5
14 hours ago
RegistrationMagic<= 6.0.9.1
Cross-Site Request Forgery to Privilege Escalation vulnerability
8.8
14 hours ago
Slim SEO<= 4.9.8
Authenticated (Contributor+) Insufficient Authorization to Private Content Disclosure vulnerability
4.3
15 hours ago
Qi Blocks<= 1.4.9
Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification vulnerability
4.3
15 hours ago
Motors<= 1.4.111
Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification vulnerability
4.3
15 hours ago
LearnPress<= 4.4.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
15 hours ago