The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,218
Mitigations16,701
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Bit Assist< 1.8.2
Unauthenticated Arbitrary File Upload via Response Endpoint vulnerability
6.5
18 minutes ago
REST API Log< 1.7.1
Unauthenticated Sensitive Log Data Disclosure via Download Endpoint vulnerability
7.5
22 minutes ago
Simple Google Calendar Outlook Events Block Widget< 3.1.0
Unauthenticated SSRF via calendar_id vulnerability
7.2
28 minutes ago
Newsletters< 4.16
Unauthenticated Server-Side Request Forgery via SNS Bounce Handler vulnerability
7.2
36 minutes ago
Personal QR Message<= 1.0
Unauthenticated Arbitrary File Upload vulnerability
10
46 minutes ago
Appointment Hour Booking< 1.5.88
Unauthenticated Booking Price Manipulation via tcost Parameter vulnerability
5.3
57 minutes ago
WP Maps< 4.9.7
Subscriber+ Denial of Service vulnerability
6.5
57 minutes ago
Brizy< 2.8.19
WordPress Brizy - Page Builder plugin < 2.8.19 - Contributor+ Template Type Update via IDOR vulnerability
4.3
1 hour ago
Formidable Forms<= 6.33.1
Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter vulnerability
7.1
1 hour ago
WP Fastest Cache <= 1.5.0
Unauthenticated Stored Cross-Site Scripting via HTTP Host Header vulnerability
7.1
2 hours ago
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels<= 4.9.8
Authenticated (Subscriber+) Arbitrary File Read vulnerability
6.5
2 hours ago
Forminator<= 1.57.0.2
Unauthenticated Stored Cross-Site Scripting via Radio Field (Save and Continue Draft) vulnerability
7.1
2 hours ago
Forminator<= 1.57.0
Unauthenticated DOM-Based Cross-Site Scripting via 'error_description' Parameter vulnerability
7.1
2 hours ago
Ultimate Member<= 2.12.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
WooCommerce Lottery<= 2.2.9
Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters vulnerability
9.3
2 hours ago
Classified Listing - Mobile Number Verification<= 1.6.0
WordPress Classified Listing - Mobile Number Verification plugin <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login vulnerability
8.1
2 hours ago
WP ERP<= 1.17.8
Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment vulnerability
10
3 hours ago
Security Hardener<= 2.4.4
Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
3 hours ago
InfusedWoo Pro<= 5.1.17
Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
3 hours ago
SmilePass Selfie Login<= 1.0.2
Unauthenticated Authentication Bypass vulnerability
9.8
3 hours ago