The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,346
Mitigations19,029
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Ultimate Security For WooCommerce: IP Restriction, Password Policy and More1.0.10-1.0.16
Unauthenticated Privilege Escalation vulnerability
9.8
4 hours ago
WP Event Manager< 3.4.2
Unauthenticated Unpublished Post Overwrite vulnerability
8.2
5 hours ago
All In One Login< 2.5.0
Unauthenticated Account Takeover vulnerability
9.8
5 hours ago
WP PageNavi Style<= 1.4
Stored XSS vulnerability
7.1
5 hours ago
Dokan< 5.3.3
Unauthenticated Order PII Disclosure and Note Manipulation vulnerability
6.5
5 hours ago
IVPAY payments<= 1.0.8
Unauthenticated SQLi vulnerability
9.3
5 hours ago
Cloud Blocks<= 1.1.8
Unauthenticated Stored XSS vulnerability
7.1
5 hours ago
BuddyPress Xprofile Custom Fields Type<= 2.6.3
Authenticated (Custom+) Arbitrary File Deletion vulnerability
6.5
5 hours ago
My Calendar3.8.8-3.8.10
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
5 hours ago
Product Gallery Slider for WooCommerce2.3.23-2.3.35
Missing Authorization vulnerability
4.3
5 hours ago
Kirki<= 6.2.4
Unauthenticated reCAPTCHA Validation Bypass vulnerability
5.3
5 hours ago
Woody ad snippets< 3.3.1
Unauthenticated Remote Code Execution vulnerability
10
5 hours ago
MembershipWorks<= 6.16
Unauthenticated Payment Bypass vulnerability
5.3
6 hours ago
Dokan< 5.3.3
Vendor+ Reverse Withdrawal Ledger Credit Without Payment vulnerability
2.2
6 hours ago
CatFolders< 2.5.7
Subscriber+ Folder Ownership Reset and User Restriction Disable vulnerability
3.1
8 hours ago
CatFolders< 2.5.7
Author+ SQLi vulnerability
8.5
8 hours ago
Dokan< 5.3.3
Admin+ Cross-Site Vendor Activation vulnerability
4.3
8 hours ago
Dokan< 5.3.3
Unauthenticated Email Sender Spoofing vulnerability
5.3
8 hours ago
Easy Social Icons< 4.0.3
Author+ Stored XSS vulnerability
6.5
8 hours ago
Car Dealer<= 4.73
Unauthenticated Private/Draft/Pending Post Content Disclosure vulnerability
5.3
8 hours ago