The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,351
Mitigations16,746
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
wpDiscuz< 7.6.60
Unauthenticated Stored XSS via Image URL Conversion vulnerability
7.1
5 minutes ago
Simple Membership< 4.7.8
Unauthenticated Stored XSS via PayPal Subscription Subscriber Name vulnerability
7.1
7 minutes ago
WP Maps< 4.9.7
Subscriber+ Local File Inclusion vulnerability
8.8
13 minutes ago
Advanced Google Maps< 6.1.3
Unauthenticated Local File Inclusion vulnerability
8.1
13 minutes ago
Content Views< 4.5
Subscriber+ SQL Injection via preview_request vulnerability
8.5
15 minutes ago
Library Management System< 3.6.7
Subscriber+ SQL Injection via Filter Value vulnerability
8.5
22 minutes ago
Directorist8.5-8.9.2
WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin 8.5-8.9.3 - 8.9.2 - Subscriber+ Arbitrary Image Move vulnerability
5.8
26 minutes ago
WPLegalPages< 3.7.1
Unauthenticated API Secret Disclosure vulnerability
7.5
27 minutes ago
Events Manager< 7.4.1
Unauthenticated Privilege Escalation to Administrator vulnerability
8.1
28 minutes ago
WP OAuth Server< 6.3.1
Unauthenticated OAuth Token and User Data Disclosure vulnerability
7.5
33 minutes ago
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart< 2.1.2
Unauthenticated Arbitrary Price Manipulation vulnerability
7.5
34 minutes ago
Advanced File Manager< 5.4.13
Authenticated Arbitrary File Read and Write via fma_load_fma_ui vulnerability
7.5
35 minutes ago
Firebase Authentication< 1.7.1
Unauthenticated Account Takeover vulnerability
9.8
36 minutes ago
WPMU DEV Dashboard<= 5.0.1
Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion vulnerability
9.8
37 minutes ago
Product Input Fields for WooCommerce< 2.0.2
Unauthenticated Arbitrary File Upload vulnerability
10
43 minutes ago
Bit File Manager< 6.9.1
Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch vulnerability
8.1
48 minutes ago
Forminator< 1.57.1
Unauthenticated Multisite Site Creation and Privilege Escalation vulnerability
9.8
1 hour ago
Everest Forms<= 3.4.4
Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value' vulnerability
7.2
1 hour ago
Shared Files Pro< 1.7.68
Unauthenticated Arbitrary File Deletion vulnerability
8.6
1 hour ago
Shared Files< 1.7.67
Unauthenticated Arbitrary File Deletion vulnerability
8.6
1 hour ago