The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total50,141
Mitigations16,139
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Simply Poll <= 1.4.1
Unauthenticated SQL Injection vulnerability
9.3
2 minutes ago
UsersWP< 1.2.67
Two-Factor Authentication Bypass vulnerability
7.1
4 minutes ago
Meta Box AIO<= 3.8.0
Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability
9.1
26 minutes ago
WP Fast Total Search<= 1.80.280
Unauthenticated SQL Injection vulnerability
9.3
38 minutes ago
Plugin Organizer<= 10.2.4
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
45 minutes ago
Fluent Forms Pro Add On Pack<= 6.2.6
Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change vulnerability
8.8
49 minutes ago
WPDM – Premium Packages<= 6.2.0
Unauthenticated SQL Injection vulnerability
9.3
1 hour ago
TrueBooker<= 1.2.2
Unauthenticated SQL Injection vulnerability
9.3
1 hour ago
Taskbuilder<= 5.0.9
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
1 hour ago
Web Directory Free<= 1.7.13
Unauthenticated SQL Injection vulnerability
9.3
1 hour ago
Demi &#8211; One Click Demo Import, Backup &amp; Site Migration<= 0.0.7
Unauthenticated Arbitrary Directory Deletion vulnerability
7.5
1 hour ago
ProfileGrid < 5.9.9.8
Unauthenticated Privilege Escalation vulnerability
9.8
2 hours ago
Customer Switching< 2.1.3
Customer+ Privilege Escalation to Administrator vulnerability
8.8
2 hours ago
@aws-amplify/codegen-ui-react<= 2.20.2
NPM: AWS Amplify Studio UI Component Properties Has an Input Validation Issue
9.5
12 hours ago
MailerPress<= 1.5.0
Missing Authorization to Unauthenticated Contact Updates vulnerability
5.3
13 hours ago
dssrf<= 1.0.3
NPM: dssrf has an SSRF bypass with remove_at_symbol_in_string
8.7
17 hours ago
Uncanny Automator<= 7.3.2
Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure vulnerability
7.5
20 hours ago
Bookly<= 27.5
Unauthenticated SQL Injection vulnerability
9.3
20 hours ago
Chaty Pro<= 3.5.5
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
21 hours ago
Question Answer<= 1.2.73
Unauthenticated SQL Injection vulnerability
9.3
21 hours ago