The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,862
Mitigations18,206
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Kirki<= 6.3.2
Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure vulnerability
7.5
37 minutes ago
Filter & Grids<= 3.12.19
Authenticated (Author+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
41 minutes ago
Rank Math SEO PRO3.0.123
Unauthenticated Embedded Malicious Code vulnerability
9.8
44 minutes ago
GetPaid<= 2.8.61
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
48 minutes ago
European VAT Compliance Assistant for WooCommerce<= 1.36.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
50 minutes ago
weForms<= 1.6.28
Unauthenticated Limited Media File Deletion vulnerability
5.4
50 minutes ago
LearnPress<= 4.4.10
Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration vulnerability
6.5
50 minutes ago
LatePoint<= 5.7.4
Unauthenticated Authentication Bypass vulnerability
9.1
12 hours ago
WP Booking System<= 2.1.0.3
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
6.5
12 hours ago
User Registration<= 5.2.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 hours ago
WooCommerce EU VAT Assistant<= 2.1.30.260413
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 hours ago
@aborruso/ckan-mcp-server< 0.4.112
NPM: ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
3.1
12 hours ago
LearnPress<= 4.4.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 hours ago
LearnPress<= 4.4.10
Unauthenticated PHP Object Injection vulnerability
9.8
12 hours ago
WP Booking System<= 2.1.0.3
Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability
6.8
12 hours ago
WP Booking System<= 2.1.0.3
Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
12 hours ago
Tutor LMS<= 4.1.0
Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Course Modification and Ownership Takeover vulnerability
4.3
16 hours ago
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN<= 1.4.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
17 hours ago
Post Export Import with Media<= 1.17.2
Authenticated (Administrator+) Path Traversal vulnerability
4.9
17 hours ago
User Registration<= 5.2.8
Cross-Site Request Forgery to trigger_bulk_action() vulnerability
4.3
17 hours ago