The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,072
Mitigations17,002
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
bbPress<= 2.6.14
Sensitive Data Exposure vulnerability
5.3
24/09/2026
Metform< 4.1.9
Unauthenticated Email Header Injection vulnerability
4.8
2 hours ago
Payment Gateway PayPay for WooCommerce0.5-0.9.3
Unauthenticated Payment Bypass vulnerability
3.7
2 hours ago
Nexi XPay Build7.6.1-7.6.2
Unauthenticated Saved Payment Token Disclosure vulnerability
5.3
2 hours ago
Kirki<= 6.2.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.16
Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago
HUSKY<= 1.4.3
Cross Site Scripting (XSS) vulnerability
7.1
3 hours ago
HIPAA FORMS< 3.2.0
Unauthenticated Authorization Bypass vulnerability
6.5
5 hours ago
SSL Zen< 4.7.40
Subscriber+ TLS Private Key Disclosure vulnerability
7.5
5 hours ago
Site Reviews7.2.2-8.2.2
Unauthenticated PHP Object Injection vulnerability
9.8
5 hours ago
Developer Tools<= 1.1.3
Arbitrary File Upload vulnerability
10
5 hours ago
All In One SEO Pack< 5.0.0.1
Contributor+ Stored XSS via ai-assistant Block vulnerability
6.5
5 hours ago
WP Express Checkout (Accept PayPal Payments)< 2.4.9
Unauthenticated Payment Bypass via wpec_process_payment vulnerability
5.3
5 hours ago
RegistrationMagic< 6.0.9.9
Broken Access Control vulnerability
5.3
5 hours ago
Ultimate Gift Cards For WooCommerce< 3.2.10
Broken Access Control vulnerability
5.4
5 hours ago
Media LIbrary Assistant<= 3.35
Cross Site Scripting (XSS) vulnerability
5.9
6 hours ago
Themify – WooCommerce Product Filter<= 1.5.5
WordPress Themify - WooCommerce Product Filter plugin <= 1.5.5 - Reflected Cross-Site Scripting vulnerability
7.1
6 hours ago
Classified Listing< 6.1.1
Arbitrary Content Deletion vulnerability
5.4
6 hours ago
Auto x LINE<= 1.0.0
Broken Access Control vulnerability
5.3
6 hours ago
Weaver Show Posts< 1.8.1
PHP Object Injection vulnerability
7.2
6 hours ago