The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,204
Mitigations16,681
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP Social Media Login<= 1.0.6
Unauthenticated Account Takeover vulnerability
9.8
10 minutes ago
MalCare Security5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
19 minutes ago
BlogVault5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
19 minutes ago
The WP Remote WordPress Plugin5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
19 minutes ago
CM Map Locations<= 2.1.8
Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action vulnerability
8.8
31 minutes ago
Mang Board WP<= 2.3.7
Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie vulnerability
8.8
1 hour ago
Noptin< 4.3.3
Unauthenticated Subscriber PII and confirm_key Disclosure vulnerability
5.3
1 hour ago
Tutor LMS< 4.0.6
Unauthenticated SQLi vulnerability
5.3
1 hour ago
Avada<= 7.16
Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability
9.8
1 hour ago
Fusion Builder<= 3.16
Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability
9.8
1 hour ago
WP Data Access<= 5.5.68
Unauthenticated Insecure Direct Object Reference to Data Access vulnerability
5.3
2 hours ago
Greenshift<= 12.8.9
Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI vulnerability
6.5
2 hours ago
Reviews and Rating – Google My Business<= 5.10
WordPress Reviews and Rating - Google Reviews plugin <= 5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes vulnerability
6.5
2 hours ago
WP Project Manager2.1.0-4.0.6
Unauthenticated Subscriber Account Creation vulnerability
5.3
2 hours ago
RegistrationMagic< 6.0.9.4
Admin+ SQLi vulnerability
7.6
3 hours ago
WP Full Stripe Free< 8.5.1
Cross-Customer Subscription Modification vulnerability
4.3
3 hours ago
WP Full Stripe Free< 8.5.1
Unauthenticated Customer Portal Subscription and Billing Data Disclosure vulnerability
5.3
3 hours ago
WP Event SOlution< 4.1.19
Unauthenticated Order Completion Without Payment vulnerability
5.3
3 hours ago
Kirki< 6.0.14
Unauthenticated User and Comment Author Email Disclosure vulnerability
5.3
3 hours ago
WP Project Manager< 4.0.7
Subscriber+ Cross-Project Task Disclosure and Task Board Modification vulnerability
5.4
3 hours ago