The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,924
Mitigations16,591
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
TabaPay Gateway<= 1.4.0
Unauthenticated Account Takeover via Payment Callback vulnerability
9.8
17 minutes ago
Product Shortlist<= 1.0.4
Unauthenticated SQL Injection via get_shortlisted_products vulnerability
9.3
20 minutes ago
SmartCrawl< 3.16.3
Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration vulnerability
4.3
25 minutes ago
Simple File List<= 6.3.11
Unauthenticated Stored XSS via File Description vulnerability
7.1
26 minutes ago
Simple File List<= 6.3.11
Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability
7.5
30 minutes ago
User Verification<= 2.0.47
Unauthenticated Arbitrary Account Lockout via IDOR vulnerability
7.5
37 minutes ago
Easy Media Replace<= 0.2.0
Author+ Stored XSS via Attachment Title vulnerability
5.9
40 minutes ago
YayCurrency< 3.3.5
Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration vulnerability
5.3
40 minutes ago
Quiz And Survey Master< 11.2.4
Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR vulnerability
4.3
43 minutes ago
Quiz And Survey Master< 11.2.4
Contributor+ Arbitrary Quiz Text Settings Update via IDOR vulnerability
4.3
44 minutes ago
Booking calendar, Appointment Booking System<= 3.2.36
Unauthenticated Stored XSS via SVG File Upload vulnerability
7.1
46 minutes ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer< 2.33.5
Unauthenticated Stored XSS via Critical CSS Token Bypass vulnerability
4.7
56 minutes ago
WCFM Marketplace< 3.8.1
Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR vulnerability
4.3
56 minutes ago
Dinatur<= 1.18
Unauthenticated SQL Injection via Column Name Injection vulnerability
9.3
57 minutes ago
WP Event SOlution< 4.1.21
Contributor+ Schedule Deletion and Modification via IDOR vulnerability
4.3
58 minutes ago
WP Event SOlution< 4.1.21
Contributor+ User Role and Meta Modification via Speaker Creation vulnerability
4.3
59 minutes ago
WP Event SOlution< 4.1.21
Contributor+ Speaker Account Deletion via IDOR vulnerability
4.3
59 minutes ago
WP Event SOlution< 4.1.21
Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR vulnerability
5.4
1 hour ago
Gift Cards For WooCommerce Pro< 4.2.10
Unauthenticated Arbitrary File Upload vulnerability
10
1 hour ago
gettext-converter< 1.3.3
NPM: gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
6.9
12 hours ago