The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total50,054
Mitigations16,139
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Easy Property Listings<= 3.5.24
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
13 minutes ago
Download Manager< 3.3.66
Author+ Stored XSS vulnerability
5.9
23 minutes ago
Dynamic Pricing With Discount Rules for WooCommerce< 5.0.0
Reflected XSS vulnerability
7.1
24 minutes ago
Material Dashboard<= 1.4.10
Missing Authorization to Unauthenticated Task Enumeration, Execution, and Deletion vulnerability
7.3
34 minutes ago
WPFormify – Stripe Payments with Form and Checkout<= 1.1.1
Missing Authorization vulnerability
8.2
42 minutes ago
VikAppointments Services Booking Calendar<= 1.2.19
Unauthenticated SQL Injection vulnerability
9.3
51 minutes ago
AIWU<= 1.4.6
Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability
7.5
58 minutes ago
Multi Uploader for Gravity Forms<= 1.1.8
Missing Authorization to Unauthenticated Arbitrary Media Deletion vulnerability
9.1
1 hour ago
WP Activity Log Premium<= 5.6.4
Cross Site Request Forgery (CSRF) vulnerability
5.4
1 hour ago
Database Collation Fix<= 1.2.10
Unauthenticated SQL Injection vulnerability
9.3
1 hour ago
User Access Manager<= 2.3.15
Unauthenticated Arbitrary File Read vulnerability
7.5
1 hour ago
Participants Database< 2.7.8.4
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Direct Payments for WooCommerce< 2.5.3
Unauthenticated Cross-Customer Order Tampering vulnerability
7.5
2 hours ago
Contact Form Extender for Divi &#8211; Save Entries, File Upload &amp; Country Code Field<= 1.0.6
Unauthenticated Arbitrary File Deletion vulnerability
8.6
2 hours ago
Pronamic Pay<= 10.1.0
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
2 hours ago
Kali Forms<= 2.4.20
Unauthenticated Remote Code Execution vulnerability
10
2 hours ago
Ultimate Member< 2.12.1
Unauthenticated Privilege Escalation vulnerability
9.8
2 hours ago
Bit Integrations<= 2.9.0
Unauthenticated Arbitrary File Read vulnerability
7.5
2 hours ago
CubeWP<= 1.1.30
Unauthenticated Arbitrary File Read vulnerability
7.5
2 hours ago
WooCommerce Social Login<= 2.8.7
WordPress WooCommerce - Social Login plugin <= 2.8.7 - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass vulnerability
9.8
3 hours ago