The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,108
Mitigations16,672
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
eCommerce Product Catalog<= 3.5.10
Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute vulnerability
6.5
2 minutes ago
@platejs/media>= 53.0.0, < 53.1.4
NPM: Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript
8.7
5 minutes ago
browse-mcp<= 0.8.1
NPM: browse-mcp has an arbitrary file write via unconfined download and state paths
8.6
6 minutes ago
Newsletters<= 4.17
Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter vulnerability
4.3
7 minutes ago
Media Sweep – WordPress Media Cleaner<= 1.1.3
Authenticated (Administrator+) SQL Injection via 'fields' Parameter vulnerability
7.6
8 minutes ago
My Agile Privacy<= 3.3.6
Missing Authorization to Unauthenticated Plugin Settings Modification via map_missing_cookie_shield / map_check_consent_mode_status AJAX Actions vulnerability
5.3
8 minutes ago
urllib<= 2.44.0
NPM: urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage
7.5
15 minutes ago
pickem< 1.0.7
NPM: pickem vulnerable to terminal escape-sequence injection via unsanitized item text
8.6
36 minutes ago
Drag and Drop Multiple File Upload for WooCommerce< 1.1.8
Unauthenticated File Deletion via Nonce Oracle vulnerability
6.5
3 hours ago
Insert or Embed Articulate Content into WordPress<= 4.3000000027
Editor+ Arbitrary File Upload vulnerability
9.1
3 hours ago
MStore API< 4.21.0
Subscriber+ Order and Customer PII Disclosure via IDOR vulnerability
4.3
3 hours ago
GEO my WordPress< 4.5.5.3
Subscriber+ Arbitrary Geolocation Record Modification and Deletion via IDOR vulnerability
4.3
3 hours ago
Simply Schedule Appointments< 1.6.12.11
Contributor+ Sensitive Data Disclosure via Admin Shortcode vulnerability
4.3
3 hours ago
LatePoint< 5.6.8
Unauthenticated Booking Object Mass Assignment via Public Booking Funnel vulnerability
5.3
3 hours ago
RealHomes Memberships< 3.1.0
Subscriber+ Membership Payment Bypass vulnerability
4.3
3 hours ago
Hotel Booking Lite< 6.2.3
Subscriber+ Customer Data Modification via IDOR vulnerability
5.4
3 hours ago
YayPricing< 3.5.7
Subscriber+ Pricing Configuration Modification and Coupon Code Disclosure vulnerability
5.4
3 hours ago
TaxoPress< 3.51.0
Contributor+ Private Post Disclosure via IDOR vulnerability
4.3
3 hours ago
Subscriptions for WooCommerce< 2.0.1
Shop Manager+ Arbitrary Plugin Installation vulnerability
7.2
3 hours ago
RegistrationMagic< 6.0.9.5
Unauthenticated Payment Bypass via Amount-Blind PayPal Verification vulnerability
5.3
3 hours ago