The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,751
Mitigations18,566
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP Roster< 2.35
Unauthenticated Roster Member Deletion vulnerability
5.3
16 minutes ago
Persian Woocommerce SMS7.2.0-7.3.1
Reflected XSS vulnerability
7.1
19 minutes ago
WPOrLogin &#8211; Custom Login, Social Login, Limit Attempts, Hide Login &amp; reCAPTCHA< 3.1.0
Unauthenticated Hide Login Slug Update vulnerability
6.5
20 minutes ago
PayPlug for WooCommerce (Official)2.8.0-3.1.0
Unauthenticated Arbitrary Order Deletion, Modification and Disclosure vulnerability
6.5
21 minutes ago
Hustle<= 7.8.14.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
28 minutes ago
Casso Flow< 4.2.0
Unauthenticated WooCommerce Order Payment Confirmation vulnerability
5.3
29 minutes ago
WooCommerce Menu Cart< 3.2.1
Unauthenticated Stored XSS vulnerability
7.1
30 minutes ago
UniPAY Payment Gateway For WooCommerce<= 2.3
Unauthenticated Order Payment Forgery vulnerability
5.3
36 minutes ago
PayPlug for WooCommerce (Official)2.9.0-3.1.0
Unauthenticated Order Key Disclosure and Order Cancellation vulnerability
6.5
37 minutes ago
BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility<= 1.3.6
Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalation vulnerability
6.3
37 minutes ago
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More<= 1.31.0
Unauthenticated Local File Inclusion vulnerability
5.9
39 minutes ago
CMB2<= 2.13.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Prime Slider – Addons For Elementor<= 4.7.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Postie<= 1.9.87
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
IvyForms<= 1.5.1
Authenticated (Custom+) Arbitrary File Upload vulnerability
8.8
1 hour ago
WpEvently<= 5.7.8
Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter vulnerability
7.2
1 hour ago
Knowledge Base for Documentation, FAQs with AI Assistance<= 17.214.0
Reflected Cross-Site Scripting vulnerability
7.1
1 hour ago
MxChat<= 3.2.25
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
My auctions allegro<= 4.0.3
Broken Access Control vulnerability
5.4
1 hour ago
Checkout Files Upload for WooCommerce< 2.4.0
Unauthenticated Arbitrary File Upload vulnerability
10
2 hours ago