The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,097
Mitigations16,122
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@aws-amplify/codegen-ui-react<= 2.20.2
NPM: AWS Amplify Studio UI Component Properties Has an Input Validation Issue
9.5
2 hours ago
dssrf<= 1.0.3
NPM: dssrf has an SSRF bypass with remove_at_symbol_in_string
8.7
6 hours ago
Uncanny Automator<= 7.3.2
Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure vulnerability
7.5
10 hours ago
Bookly<= 27.5
Unauthenticated SQL Injection vulnerability
9.3
10 hours ago
Chaty Pro<= 3.5.5
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
10 hours ago
Question Answer<= 1.2.73
Unauthenticated SQL Injection vulnerability
9.3
10 hours ago
WPDM – Premium Packages<= 7.0.4
Authentication Bypass to Non-Admin vulnerability
6.3
10 hours ago
WP User Frontend< 4.3.8
Unauthenticated Author-less Attachment Deletion vulnerability
6.5
10 hours ago
TheCartPress<= 1.5.3.6
Unauthenticated Privilege Escalation vulnerability
9.8
11 hours ago
Backup and Staging by WP Time Capsule< 1.21.16
Authentication Bypass vulnerability
9.8
11 hours ago
Cherry Framework<= 3.1.4
Unauthenticated Backup Download vulnerability
7.5
11 hours ago
WP Super Edit<= 2.5.4
Unauthenticated Arbitrary File Upload vulnerability
10
11 hours ago
Backup and Restore<= 1.0.3
Authenticated (Subscriber+) Arbitrary File Deletion vulnerability
7.7
11 hours ago
Baggage Freight Shipping Australia<= 0.1.0
Arbitrary File Upload vulnerability
10
11 hours ago
IMDb Profile Widget<= 1.0.8
Unauthenticated Local File Inclusion vulnerability
8.1
11 hours ago
Mac Photo Gallery<= 3.0
Unauthenticated Arbitrary File Deletion vulnerability
8.6
11 hours ago
HB Audio Gallery Lite<= 1.0.0
Unauthenticated Arbitrary File Download vulnerability
7.5
11 hours ago
Background Image Cropper<= 1.2
Unauthenticated Remote Code Execution vulnerability
10
11 hours ago
Admin and Site Enhancements (ASE) Pro<= 8.9.0
Unauthenticated Remote Code Execution vulnerability
10
11 hours ago
Backup by Supsystic<= 2.3.9
Unauthenticated Local File Inclusion vulnerability
8.1
11 hours ago