The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total35,936
Mitigations13,247
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Print Invoice & Delivery Notes for WooCommerce<= 5.8.0
Unauthenticated Remote Code Execution vulnerability
10
1 hour ago
PhastPress<= 3.7
Unauthenticated Arbitrary File Read via Null Byte Injection vulnerability
7.5
2 hours ago
Ocean Modal Window< 2.3.3
Editor+ Remote Code Execution vulnerability
9.1
2 hours ago
WP Hallo Welt<= 1.4.
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Attachments Handler<= 1.1.7
Reflected Cross-Site Scripting vulnerability
7.1
2 hours ago
Flex Store Users<= 1.1.0
Unauthenticated Privilege Escalation vulnerability
9.8
3 hours ago
File Uploader for WooCommerce<= 1.0.3
Unauthenticated Arbitrary File Upload via add-image-data vulnerability
10
3 hours ago
WP JobHunt<= 7.7
Authenticated (Candidate+) Insecure Direct Object Reference vulnerability
4.3
13 hours ago
WP JobHunt<= 7.7
Missing Authorization to Authenticated (Candidate+) Stored Cross-Site Scripting via 'status' vulnerability
6.5
13 hours ago
Nika<= 1.2.14
Local File Inclusion vulnerability
7.5
20 hours ago
Diza<= 1.3.15
Local File Inclusion vulnerability
7.5
20 hours ago
Responsive Posts Carousel Pro<= 15.2
Cross Site Scripting (XSS) vulnerability
6.5
21 hours ago
WPBulky<= 1.1.13
SQL Injection vulnerability
7.6
21 hours ago
VPSUForm<= 3.2.24
Sensitive Data Exposure vulnerability
6.5
21 hours ago
HAPPY<= 1.0.9
Broken Access Control vulnerability
5.3
21 hours ago
Chakra test<= 1.0.1
Broken Access Control vulnerability
4.3
21 hours ago
Beaver Builder<= 2.9.4.1
Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Update vulnerability
8.1
1 day ago
WooMulti<= 1.7
Authenticated (Subscriber+) Arbitrary File Deletion vulnerability
7.7
1 day ago
Happy Addons for Elementor<= 3.20.3
Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS vulnerability
6.5
1 day ago
Restrict Content<= 3.2.15
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes vulnerability
6.5
1 day ago