The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,633
Mitigations18,106
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Asaas Gateway for WooCommerce< 2.7.8
Unauthenticated Order Payment Bypass vulnerability
5.3
3 hours ago
Trust Payments Gateway for WooCommerce< 3.1.0
Unauthenticated Order Payment Completion vulnerability
6.5
3 hours ago
Forms< 3.0.2
Unauthenticated Stored XSS vulnerability
7.1
3 hours ago
affiliate-toolkit< 3.9.1
Contributor+ RCE vulnerability
7.2
3 hours ago
WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to fix Insecure Content< 7.8.8.2
Unauthenticated Certificate Private Key and ACME Order Replacement vulnerability
6.5
3 hours ago
WP Booking System< 2.1.0.1
Unauthenticated Stored XSS vulnerability
7.1
3 hours ago
Contact Form by WPForms1.10.0.1-2.0.2.1
Unauthenticated Payment Bypass vulnerability
5.3
4 hours ago
Classified Listing< 6.1.1
Subscriber+ Unattached Media Deletion and Modification vulnerability
5.9
4 hours ago
Rank Math SEO< 1.0.280
Unauthenticated SEO Analyzer Results Deletion vulnerability
5.3
4 hours ago
WPCode< 2.4.0
Unauthenticated Snippet Suppression vulnerability
5.3
4 hours ago
Fast Courier5.0.0-5.2.3
Unauthenticated SQLi vulnerability
8.6
4 hours ago
Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform< 2.17.2
Unauthenticated LFI vulnerability
8.6
4 hours ago
CamPay Shortcode Payment Gateway< 1.7
Unauthenticated Payment Status Forgery vulnerability
7.5
4 hours ago
Walletdoc Payment Gateway for WooCommerce< 1.8.5
Unauthenticated SQLi and Order Payment Forgery vulnerability
9.3
4 hours ago
Visma Pay for WooCommerce< 1.2.2
Unauthenticated Payment Bypass and Order Data Disclosure vulnerability
6.5
4 hours ago
Meow Lightbox<= 5.6.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
6 hours ago
Responsive Blocks< 2.3.0
Unauthenticated HTML Injection in Form Notification Email vulnerability
5.4
6 hours ago
Tickera< 3.6.0.4
Unauthenticated Order Payment Bypass vulnerability
5.3
6 hours ago
LifterLMS<= 10.3.1
Authenticated (Contributor+) Local File Inclusion vulnerability
7.5
6 hours ago
GeoDirectory<= 2.8.190
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
6 hours ago