The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total51,068
Mitigations16,664
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Zportals< 6.3.4
Subscriber+ Arbitrary File Upload vulnerability
9.9
Just now
MagicForm<= 0.1.3
Unauthenticated Arbitrary File Upload to RCE vulnerability
10
3 minutes ago
PeproDev WooCommerce Receipt Uploader<= 2.8.0
Unauthenticated Image Attachment Disclosure via IDOR vulnerability
5.3
4 minutes ago
PeproDev WooCommerce Receipt Uploader<= 2.8.0
Unauthenticated Order Receipt Tampering via IDOR vulnerability
5.3
5 minutes ago
Tutor LMS< 3.9.14
Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass vulnerability
4.3
6 minutes ago
InPost PL< 1.9.1
Unauthenticated WooCommerce Order Parcel-Locker Hijacking vulnerability
7.5
7 minutes ago
CoCart – Headless ecommerce< 4.9.0
Unauthenticated Arbitrary Price Manipulation vulnerability
5.3
11 minutes ago
F4 Post Tree< 2.0.5
Subscriber+ Arbitrary Post Parent/Menu Order Modification vulnerability
4.3
16 minutes ago
Store Locator WordPress< 1.6.9
Admin+ Arbitrary File Read via Path Traversal vulnerability
4.9
24 minutes ago
Fluent Booking< 2.1.2
Calendar Manager+ Sensitive Information Disclosure via Attendee Export vulnerability
4.9
24 minutes ago
LearnPress< 4.3.7
Unauthenticated Sensitive User Information Disclosure via REST API vulnerability
5.3
25 minutes ago
WP Go Maps< 10.0.10
Unauthenticated Sensitive Information Disclosure via Marker ID vulnerability
5.3
25 minutes ago
Frontend File Manager<= 23.6
Author+ Arbitrary Post Deletion vulnerability
5.4
26 minutes ago
Really Simple SSL< 9.5.10.1
Two-Factor OTP Bypass vulnerability
7.5
28 minutes ago
Eupago Gateway For Woocommerce< 4.7.2
Unauthenticated Arbitrary Refund Initiation vulnerability
5.3
36 minutes ago
wp2epub<= 0.65
Unauthenticated RCE vulnerability
9
50 minutes ago
DoLeads Integrator<= 1.2.2
Unauthenticated RCE vulnerability
9
51 minutes ago
User Registration< 5.2.0
Unauthenticated Paid Membership Bypass vulnerability
5.3
1 hour ago
Salon booking system< 10.30.20
Subscriber+ Booking Approval Bypass vulnerability
4.3
1 hour ago
WebAuthn Provider for Two Factor< 2.5.6
2FA Bypass vulnerability
7.2
1 hour ago