The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,956
Mitigations18,233
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
DiviGear Carousel<= 5.2.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Document Gallery4.1-5.1.1
Unauthenticated Document Thumbnail Replacement vulnerability
5.3
1 hour ago
BDM Digital Payment Gateway1.2.7-1.3.12
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
1 hour ago
Coinbase Commerce Payment Gateway for WooCommerce<= 1.4.1
Unauthenticated Webhook Signature Bypass vulnerability
5.3
1 hour ago
WP Photo Album Plus< 9.2.11.002
Reflected XSS vulnerability
7.1
1 hour ago
WP User Manager2.9-2.9.19
Unauthenticated Account Creation vulnerability
5.3
2 hours ago
EventON - Subscriber<= 1.4.5
WordPress EventON - Subscriber plugin <= 1.4.5 - Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Easy Property Listings< 3.5.27
Subscriber+ Sensitive Data Disclosure vulnerability
4.3
2 hours ago
Easy Property Listings< 3.5.28
Unauthenticated Hidden Listing Details Disclosure vulnerability
5.3
2 hours ago
Classified Listing<= 6.1.5
Direct static code injection vulnerability
4.3
19 hours ago
Surfer<= 1.8.0.744
Broken Access Control vulnerability
5.4
19 hours ago
WP Mailster<= 1.9.1.0
Local File Inclusion vulnerability
6.5
19 hours ago
Event Tickets<= 5.30.1
Insecure Direct Object References (IDOR) vulnerability
4.3
19 hours ago
YITH WooCommerce Product Bundles<= 2.29.0
Broken Access Control vulnerability
5.3
19 hours ago
Salon booking system< 10.31.11
Salon Staff+ Administrator Role Demotion vulnerability
5.5
19 hours ago
Salon booking system10.17-10.31.10
Salon Staff+ Privilege Escalation to Administrator vulnerability
7.2
20 hours ago
ThirstyAffiliates< 3.12.1
Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection vulnerability
6.5
20 hours ago
Modern Events Calendar< 7.37.0
Subscriber+ SQLi vulnerability
8.5
20 hours ago
Modern Events Calendar Lite< 7.37.0
Subscriber+ SQLi vulnerability
8.5
20 hours ago
FluentForm<= 6.2.15
Broken Access Control vulnerability
5.3
20 hours ago