The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total52,919
Mitigations17,300
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
scim-patch< 0.9.2
NPM: scim-patch: Mutation of Inherited Built-in Method Objects
4.3
1 hour ago
code-ollama<= 0.36.0
NPM: code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)
7.8
1 hour ago
WP Review Slider Pro< 12.7.12
Subscriber+ Stored XSS vulnerability
6.5
2 hours ago
File Manager7.2.2-8.0.4
Unauthenticated Database Backup Disclosure vulnerability
5.9
2 hours ago
Verge3D4.1.0-4.13.0
Unauthenticated Payment Bypass vulnerability
5.3
2 hours ago
Best Payments Plugin for WP4.6.20-4.6.25
Unauthenticated Payment Bypass vulnerability
5.3
2 hours ago
Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification1.3.0-2.3.1
Blocked User Restriction Bypass vulnerability
5.4
2 hours ago
Bookly< 28.3
Unauthenticated Payment Bypass vulnerability
5.3
2 hours ago
Contact Form by WPForms1.5.0.1-2.0.2.0
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
2 hours ago
Malcure Malware Scanner< 19.9.7
Multisite Subsite Admin+ Arbitrary File Write and Deletion vulnerability
7.2
2 hours ago
Verge3D<= 4.13.0
Unauthenticated Product Download Disclosure vulnerability
5.3
3 hours ago
WPeMatico RSS Feed Fetcher< 2.8.27
Contributor+ Post Publication and Author Spoofing vulnerability
4.9
3 hours ago
Download Manager4.0.0-7.5.5
Unauthenticated Stored XSS vulnerability
7.1
3 hours ago
Testimonials Widget<= 4.0.4
Unauthenticated SSRF vulnerability
5.8
3 hours ago
File Manager Pro< 2.1.3
DOM-based XSS vulnerability
7.1
3 hours ago
FileOrganizer< 1.2.1
DOM-based XSS vulnerability
7.1
3 hours ago
Bit File Manager< 8.0.5
DOM-based XSS vulnerability
7.1
3 hours ago
WP Review Slider Pro< 12.7.12
Subscriber+ Stored XSS vulnerability
6.5
3 hours ago
Bluff Post<= 1.1.1
Unauthenticated SQLi vulnerability
9.3
3 hours ago
SPS-Suite<= 1.4.0
Unauthenticated Time-Based SQLi vulnerability
9.3
3 hours ago