The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,230
Mitigations16,701
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Push Notification for Post and BuddyPress<= 3.20
Broken Access Control vulnerability
5.4
5 hours ago
Post SMTP4.0.0-beta.1
Settings Change vulnerability
5.4
5 hours ago
Suggestion Engine for WooCommerce<= 2.0.11
SQL Injection vulnerability
8.5
5 hours ago
Kali Forms<= 2.4.23
Broken Access Control vulnerability
5.3
5 hours ago
FluentBooking Pro<= 2.2.4
Cross Site Request Forgery (CSRF) vulnerability
8.1
5 hours ago
Ditty<= 3.1.67
Broken Access Control vulnerability
5.3
5 hours ago
GeoDirectory<= 2.8.176
Cross Site Request Forgery (CSRF) vulnerability
8.8
5 hours ago
FluentPlayer Pro<= 1.3.2
Broken Access Control vulnerability
4.9
5 hours ago
suneditor<= 3.1.3
NPM: SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed
8.5
7 hours ago
@logtape/syslog< 1.3.11
NPM: @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys
8.6
8 hours ago
@budibase/server<= 3.38.1
NPM: Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`
7.1
8 hours ago
Bit Assist< 1.8.2
Unauthenticated Arbitrary File Upload via Response Endpoint vulnerability
6.5
9 hours ago
REST API Log< 1.7.1
Unauthenticated Sensitive Log Data Disclosure via Download Endpoint vulnerability
7.5
9 hours ago
Simple Google Calendar Outlook Events Block Widget< 3.1.0
Unauthenticated SSRF via calendar_id vulnerability
7.2
9 hours ago
Newsletters< 4.16
Unauthenticated Server-Side Request Forgery via SNS Bounce Handler vulnerability
7.2
9 hours ago
Personal QR Message<= 1.0
Unauthenticated Arbitrary File Upload vulnerability
10
9 hours ago
Appointment Hour Booking< 1.5.88
Unauthenticated Booking Price Manipulation via tcost Parameter vulnerability
5.3
10 hours ago
WP Maps< 4.9.7
Subscriber+ Denial of Service vulnerability
6.5
10 hours ago
Brizy< 2.8.19
WordPress Brizy - Page Builder plugin < 2.8.19 - Contributor+ Template Type Update via IDOR vulnerability
4.3
10 hours ago
Formidable Forms<= 6.33.1
Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter vulnerability
7.1
10 hours ago