The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,099
Mitigations16,673
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Drag and Drop Multiple File Upload for WooCommerce< 1.1.8
Unauthenticated File Deletion via Nonce Oracle vulnerability
6.5
48 minutes ago
Insert or Embed Articulate Content into WordPress<= 4.3000000027
Editor+ Arbitrary File Upload vulnerability
9.1
56 minutes ago
MStore API< 4.21.0
Subscriber+ Order and Customer PII Disclosure via IDOR vulnerability
4.3
1 hour ago
GEO my WordPress< 4.5.5.3
Subscriber+ Arbitrary Geolocation Record Modification and Deletion via IDOR vulnerability
4.3
1 hour ago
Simply Schedule Appointments< 1.6.12.11
Contributor+ Sensitive Data Disclosure via Admin Shortcode vulnerability
4.3
1 hour ago
LatePoint< 5.6.8
Unauthenticated Booking Object Mass Assignment via Public Booking Funnel vulnerability
5.3
1 hour ago
RealHomes Memberships< 3.1.0
Subscriber+ Membership Payment Bypass vulnerability
4.3
1 hour ago
Hotel Booking Lite< 6.2.3
Subscriber+ Customer Data Modification via IDOR vulnerability
5.4
1 hour ago
YayPricing< 3.5.7
Subscriber+ Pricing Configuration Modification and Coupon Code Disclosure vulnerability
5.4
1 hour ago
TaxoPress< 3.51.0
Contributor+ Private Post Disclosure via IDOR vulnerability
4.3
1 hour ago
Subscriptions for WooCommerce< 2.0.1
Shop Manager+ Arbitrary Plugin Installation vulnerability
7.2
1 hour ago
RegistrationMagic< 6.0.9.5
Unauthenticated Payment Bypass via Amount-Blind PayPal Verification vulnerability
5.3
1 hour ago
Subscriptions for WooCommerce< 2.0.1
Payment Bypass via Attacker-Supplied PayPal Capture Token vulnerability
5.3
1 hour ago
Subscriptions for WooCommerce< 2.0.1
Subscriber+ Subscription Detail Disclosure via IDOR vulnerability
4.3
1 hour ago
WP Hotel Booking< 2.3.2
Unauthenticated PayPal Payment Bypass vulnerability
5.3
1 hour ago
WP Hotel Booking< 2.3.3
Unauthenticated Payment Bypass via Price Manipulation vulnerability
5.3
1 hour ago
Password Protected< 2.8.4
Unauthenticated Sensitive Information Exposure via REST API vulnerability
5.3
1 hour ago
Simple Membership< 4.7.7
Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification vulnerability
5.3
1 hour ago
Visualizer< 4.0.6
Contributor+ Server-Side Request Forgery via JSON Import vulnerability
6.4
1 hour ago
AutomatorWP<= 5.8.4
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action vulnerability
4.3
1 hour ago