The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,761
Mitigations18,567
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Contact Form 7 Multi-Step Forms<= 4.7
Reflected Cross-Site Scripting vulnerability
7.1
4 hours ago
WP Roster< 2.35
Unauthenticated Roster Member Deletion vulnerability
5.3
4 hours ago
Persian Woocommerce SMS7.2.0-7.3.1
Reflected XSS vulnerability
7.1
4 hours ago
WPOrLogin &#8211; Custom Login, Social Login, Limit Attempts, Hide Login &amp; reCAPTCHA< 3.1.0
Unauthenticated Hide Login Slug Update vulnerability
6.5
4 hours ago
PayPlug for WooCommerce (Official)2.8.0-3.1.0
Unauthenticated Arbitrary Order Deletion, Modification and Disclosure vulnerability
6.5
4 hours ago
Hustle<= 7.8.14.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
Casso Flow< 4.2.0
Unauthenticated WooCommerce Order Payment Confirmation vulnerability
5.3
4 hours ago
WooCommerce Menu Cart< 3.2.1
Unauthenticated Stored XSS vulnerability
7.1
4 hours ago
UniPAY Payment Gateway For WooCommerce<= 2.3
Unauthenticated Order Payment Forgery vulnerability
5.3
4 hours ago
PayPlug for WooCommerce (Official)2.9.0-3.1.0
Unauthenticated Order Key Disclosure and Order Cancellation vulnerability
6.5
4 hours ago
BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility<= 1.3.6
Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalation vulnerability
6.3
4 hours ago
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More<= 1.31.0
Unauthenticated Local File Inclusion vulnerability
5.9
5 hours ago
CMB2<= 2.13.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
Prime Slider – Addons For Elementor<= 4.7.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
Postie<= 1.9.87
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
IvyForms<= 1.5.1
Authenticated (Custom+) Arbitrary File Upload vulnerability
8.8
5 hours ago
WpEvently<= 5.7.8
Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter vulnerability
7.2
5 hours ago
Knowledge Base for Documentation, FAQs with AI Assistance<= 17.214.0
Reflected Cross-Site Scripting vulnerability
7.1
5 hours ago
MxChat<= 3.2.25
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
6 hours ago
My auctions allegro<= 4.0.3
Broken Access Control vulnerability
5.4
6 hours ago