The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,836
Mitigations16,938
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
ilGhera Reviso Exporter for WooCommerce<= 1.2.3
Missing Authorization to Authenticated (Subscriber+) Agreement Grant Token Deletion via disconnect_callback Function vulnerability
4.3
37 minutes ago
WPFunnels<= 3.12.13
Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation vulnerability
5.3
56 minutes ago
Awesome Support<= 6.3.9
Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial vulnerability
4.3
1 hour ago
WP Recipe Maker<= 10.8.0
Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing vulnerability
4.3
1 hour ago
WP Event SOlution<= 4.1.17
Missing Authorization to Authenticated (Subscriber+) Notification Flow Management vulnerability
5.4
1 hour ago
WP Crowdfunding<= 2.2.1
Authenticated (Shop Manager+) SQL Injection vulnerability
4.9
3 hours ago
Podlove Podcast Publisher<= 4.5.5
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
Mail Mint<= 1.31.0
Authenticated (Custom+) SQL Injection vulnerability
8.5
3 hours ago
Ninja Forms<= 3.14.6
Authenticated (Administrator+) PHP Object Injection vulnerability
7.2
3 hours ago
My Calendar<= 3.8.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
My Calendar<= 3.8.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
WP Event SOlution<= 4.1.22
Authenticated (Custom+) Local File Inclusion vulnerability
7.5
4 hours ago
EDD Product Catalog Feed by PixelYourSite<= 1.0.2
Authenticated (Subscriber+) Arbitrary Options Deletion vulnerability
7.1
7 hours ago
JetFormBuilder< 3.6.5.2
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
7 hours ago
B2BKing< 5.2.40
Unauthenticated B2B Group Assignment and Approval Bypass vulnerability
5.3
7 hours ago
Kirki6.2.1-6.2.5
Unauthenticated Stored XSS vulnerability
7.1
9 hours ago
SureCart< 4.7.0
Unauthenticated Account Creation with Automatic Login vulnerability
5.3
9 hours ago
Email Subscribers & Newsletters<= 5.9.27
Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field vulnerability
6.5
9 hours ago
Profile Builder<= 3.15.7
Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability
7.1
10 hours ago
Beaver Builder<= 2.10.3.1
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
10 hours ago