The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,207
Mitigations17,881
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Advanced Form Integration<= 2.9.0
Unauthenticated Unverified Password Change to Authentication Bypass / Privilege Escalation via Contact Form 7 Submission to Ultimate Member Update Profile Field Action vulnerability
9.8
10 minutes ago
Academy LMS<= 4.0.3
Authenticated (Custom+) Privilege Escalation to add_child REST endpoint vulnerability
5.4
1 hour ago
Livees Checkout6.8-7.0.2
Unauthenticated Order Status Change, Order Note Injection & Order Key Disclosure vulnerability
6.5
1 hour ago
Shipping for Nova Poshta1.18.7-1.19.8
Unauthenticated Order Shipment Record Deletion vulnerability
5.3
1 hour ago
Testimonials by BestWebSoft1.0.5-1.0.8
Unauthenticated SQLi vulnerability
6.8
1 hour ago
UnitechPay<= 1.0.6.3
Unauthenticated Order Payment Bypass vulnerability
5.3
1 hour ago
SKU Error Fixer for WooCommerce<= 1.0
Unauthenticated Orphaned Product Variation Deletion vulnerability
5.8
1 hour ago
FooSales< 1.43.3
Cashier+ Privilege Escalation vulnerability
8.8
1 hour ago
Advanced Classifieds & Directory Pro<= 3.4.4
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.4
1 hour ago
Academy LMS<= 4.0.3
Missing Authorization to Authenticated (Custom+) Arbitrary Academy Comment Deletion vulnerability
4.3
1 hour ago
Dashboard Notes<= 1.0.3
Cross Site Request Forgery (CSRF) vulnerability
7.1
2 hours ago
Before After Image Comparison – Image comparison for WP<= 1.1.21
Broken Access Control vulnerability
5.4
3 hours ago
WPFunnels<= 3.13.3
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
All Bootstrap Blocks<= 1.3.31
Sensitive Data Exposure vulnerability
4.3
4 hours ago
Asgaros Forum<= 3.4.0
Broken Access Control vulnerability
4.3
4 hours ago
Html5 Audio Player<= 2.8.8
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago
Restrict User Access – Membership Plugin with Force<= 2.8.1
Broken Access Control vulnerability
5.3
4 hours ago
WP Event Manager<= 3.4.1
Broken Access Control vulnerability
5.4
4 hours ago
Scripts n Styles<= 3.5.8
Broken Access Control vulnerability
5.3
4 hours ago
AI Translation for Polylang<= 1.6.2
Broken Access Control vulnerability
5.4
4 hours ago