The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,893
Mitigations16,582
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Easy Elementor Addons<= 2.3.7
Cross Site Request Forgery (CSRF) vulnerability
9.6
5 hours ago
New User Approve<= 3.2.8
Broken Access Control vulnerability
5.3
5 hours ago
InfiniteWP Client<= 1.13.9
SQL Injection vulnerability
7.6
5 hours ago
TranslatePress<= 3.2.5
WordPress TranslatePress - Translate Multilingual sites with AI Translation plugin <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
7 hours ago
EWWW Image Optimizer<= 8.7.3
Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content vulnerability
6.5
7 hours ago
WP Statistics<= 14.16.8
Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter vulnerability
7.1
7 hours ago
Atarim<= 5.1.1
Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Meta vulnerability
8.1
7 hours ago
TrueBooker<= 1.2.6
Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter vulnerability
9.8
7 hours ago
Speed Optimizer<= 7.8.0
Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes vulnerability
6.5
7 hours ago
PPWP<= 1.9.15
Improper Authorization To Authenticated (Contributor+) Master Password Exposure vulnerability
4.3
7 hours ago
Tourmaster< 5.4.9
Unauthenticated Sensitive Data Disclosure via Order Export vulnerability
5.3
7 hours ago
Vitepos< 3.6.0
Outlet Manager+ Privilege Escalation vulnerability
7.2
7 hours ago
Vitepos< 3.6.0
Outlet Manager+ Privilege Escalation vulnerability
7.2
7 hours ago
Amelia< 9.7
Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR vulnerability
3.8
7 hours ago
AutoNetTV Relay< 3.0.14
Unauthenticated Privilege Escalation via Scheduled Sync Cron vulnerability
8.1
7 hours ago
HT Contact Form 7< 2.9.3
Unauthenticated Saved Form Draft Data Disclosure vulnerability
3.7
7 hours ago
WP Events Manager< 2.2.5
Subscriber+ Payment Bypass via 'qty' Parameter vulnerability
4.3
7 hours ago
SEO Redirection< 9.19
WordPress SEO Redirection Plugin - 301 Redirect Manager plugin < 9.19 - Subscriber+ Redirect Rule Disclosure vulnerability
5.3
7 hours ago
Payment Plugins for PayPal WooCommerce< 2.0.20
Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order vulnerability
5.3
7 hours ago
SiteGround Security< 1.6.5
WordPress Security Optimizer - The All-In-One Protection Plugin plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password vulnerability
5.3
7 hours ago