The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,916
Mitigations17,289
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Testimonials Widget<= 4.0.4
Unauthenticated Arbitrary Post Update vulnerability
7.5
6 minutes ago
WP Review Slider Pro< 12.7.12
Subscriber+ SQLi vulnerability
8.5
12 minutes ago
Groups<= 4.6.0
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
25 minutes ago
Request a Quote for WooCommerce<= 2.9.2
Unauthenticated Arbitrary File Upload vulnerability
10
31 minutes ago
miniorange otp verification<= 5.5.5
Unauthenticated Authentication Bypass vulnerability
9.8
36 minutes ago
Ad Inserter2.8.12-2.8.18
Subscriber+ RCE / Stored XSS vulnerability
7.5
38 minutes ago
WP Verify API<= 1.0.0
Unauthenticated Verification Code Email Sending to Arbitrary Recipients vulnerability
5.3
5 hours ago
PowerPress Podcasting< 11.17.2
Contributor+ Stored XSS vulnerability
6.5
1 day ago
WP YouTube Lyte< 1.7.31
Contributor+ Stored XSS vulnerability
6.5
1 day ago
Optima Express + MarketBoost IDX Plugin8.6.0-8.7.5
Author+ Stored XSS vulnerability
6.5
1 day ago
NextScripts< 4.4.8
Authenticated Social Account Credential Disclosure and Data Deletion vulnerability
5.9
1 day ago
WPeMatico RSS Feed Fetcher< 2.8.27
Contributor+ Stored XSS vulnerability
6.5
1 day ago
WPeMatico RSS Feed Fetcher< 2.8.27
Contributor+ SSRF vulnerability
4.1
1 day ago
MailChimp For WooCommerce< 6.3
Unauthenticated Customer Email and Cart Disclosure vulnerability
5.3
1 day ago
WPeMatico RSS Feed Fetcher< 2.8.27
Contributor+ SSRF vulnerability
4.1
1 day ago
Bookly< 28.3
Staff+ Appointment and Payment Disclosure, Modification and Deletion vulnerability
3.8
1 day ago
Bookly23.2-28.2
Bookly Administrator+ PHP Object Injection vulnerability
4.7
1 day ago
EmbedPress< 4.6.7
Contributor+ Stored XSS vulnerability
6.5
1 day ago
WebFacing Email Accounts for cPanel5.3-5.3.6
Unauthenticated LFI vulnerability
5.3
1 day ago
UpdraftPlus1.23.8-1.26.7
Subscriber+ Remote Storage Credential Disclosure vulnerability
5.3
1 day ago