The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,839
Mitigations16,555
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Passster< 4.3.7
Contributor+ Protected Content Disclosure via Core REST API vulnerability
4.3
1 minute ago
ShopSmart Loyalty for WooCommerce<= 1.0.0
Unauthenticated Sensitive Information Disclosure via shopsmart_check_phone vulnerability
5.3
3 minutes ago
Visualizer< 4.0.7
Contributor+ Cross-User Chart Configuration Disclosure vulnerability
4.3
6 minutes ago
Extra Product Options Builder for WooCommerce< 1.2.176
Unauthenticated Customer File Disclosure via getpublicfileupload vulnerability
3.7
6 minutes ago
WPvivid Backup and Migration< 0.9.131
Unauthenticated Path Traversal via send_to_site_connect vulnerability
3.7
7 minutes ago
Simple JWT Login< 3.6.8
Unauthenticated Account Takeover via Missing Google id_token Audience Validation vulnerability
9.8
21 minutes ago
CatFolders Document Gallery & PDF Library< 2.0.7
Unauthenticated Attachment Disclosure via REST API vulnerability
3.7
22 minutes ago
Solace Extra<= 1.6.0
Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action vulnerability
9.1
26 minutes ago
Masteriyo - LMS< 2.3.3
Instructor+ Stored XSS via Quiz Description vulnerability
6.5
26 minutes ago
WPDM – Premium Packages< 7.0.7
WordPress Premium Packages - Sell Digital Products Securely plugin < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal Request vulnerability
4.3
26 minutes ago
ECS – Ele Custom Skin for Elementor< 4.3.10
Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source vulnerability
4.3
27 minutes ago
WP Directory Kit< 1.5.7
Admin+ SQL Injection via section Parameter vulnerability
7.6
28 minutes ago
All-in-One WP Migration< 7.108
Multisite Subsite Admin+ Network-Wide PHP Code Execution via REST Import vulnerability
7.2
33 minutes ago
Divi<= 5.8.1
Wordpress Divi theme 5.0 - 5.8.1 - Contributor+ Stored XSS via Social Media Follow Skype URL vulnerability
6.5
34 minutes ago
Manual Image Crop< 1.15
Subscriber+ Arbitrary Attachment Image Overwrite via IDOR vulnerability
4.3
34 minutes ago
ProSolution WP Client< 2.0.6
Unauthenticated Blind SQLi via 'jobID' Parameter vulnerability
9.3
48 minutes ago
Duplicate Post< 1.5.5
Authenticated Arbitrary Post Deletion via Missing Object-Level Authorization vulnerability
5.5
50 minutes ago
ProSolution WP Client< 2.0.9
Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie vulnerability
9.3
51 minutes ago
Cancel order request WooCommerce< 1.3.4.34
Unauthenticated Order Content Disclosure via Reorder AJAX Actions vulnerability
6.5
2 hours ago
Child Pages Card< 1.09
Contributor+ Stored XSS via Shortcode Attributes vulnerability
6.5
2 hours ago