The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total52,437
Mitigations17,088
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
GeoDirectory Location Manager<= 2.3.38
Unauthenticated SQL Injection vulnerability
9.3
6 minutes ago
WP Shortcut Link<= 1.2.0
Unauthenticated SQL Injection vulnerability
9.3
6 minutes ago
Product Question and Answer<= 1.1.0
Unauthenticated SQL Injection vulnerability
9.3
7 minutes ago
Tz Weekly Radio Schedule<= 1.8.1
Unauthenticated SQL Injection vulnerability
9.3
7 minutes ago
Tz Weekly Radio Schedule<= 1.8.1
Unauthenticated SQLi vulnerability
9.3
8 minutes ago
Paid Member Subscriptions< 3.0.9
Unauthenticated Membership Payment Bypass vulnerability
5.3
1 hour ago
Autopay< 5.0.1
Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion vulnerability
6.5
1 hour ago
Robokassa payment gateway for Woocommerce< 1.8.9
Unauthenticated Payment Bypass vulnerability
3.7
1 hour ago
RestroPress<= 3.4.7
Unauthenticated Order Enumeration and Order Note Modification vulnerability
6.5
1 hour ago
Hide My WP Ghost7.0.10
Unauthenticated Firewall, Threat Detection and URL Hiding Bypass vulnerability
5.3
1 hour ago
Hide My WP Ghost< 7.0.11
Unauthenticated URL Hiding Bypass vulnerability
5.3
1 hour ago
Clean Login< 1.19
Unauthenticated CAPTCHA Bypass vulnerability
5.3
1 hour ago
Price Drop Alert for WooCommerce<= 1.1
Unauthenticated SQL Injection vulnerability
9.3
3 hours ago
Login/Signup Popup< 4.0.2
Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header vulnerability
8.1
3 hours ago
WCFM Marketplace<= 3.8.2
Unauthenticated SQL Injection vulnerability
9.3
4 hours ago
Login/Signup Popup< 4.0.2
Unauthenticated Account Takeover via Password Reset Code Brute Force vulnerability
8.1
4 hours ago
InfiniteWP Client< 1.13.6
Unauthenticated Administrator Account Takeover on Multisite vulnerability
8.1
5 hours ago
SoftMarket — Digital Marketplace<= 1.0.0
Unauthenticated Account Takeover via Email Verification Bypass vulnerability
9.8
5 hours ago
To Do List Member1.4-1.6
Unauthenticated Stored XSS, File Listing and Deletion vulnerability
8.8
5 hours ago
PuppyFW<= 0.4.4
Subscriber+ Arbitrary Blog Options Update and Deletion Leading to Privilege Escalation vulnerability
8.8
5 hours ago