The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,351
Mitigations16,746
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Advanced Google Maps< 6.1.3
Unauthenticated Local File Inclusion vulnerability
8.1
2 minutes ago
Content Views< 4.5
Subscriber+ SQL Injection via preview_request vulnerability
8.5
4 minutes ago
Library Management System< 3.6.7
Subscriber+ SQL Injection via Filter Value vulnerability
8.5
11 minutes ago
Directorist8.5-8.9.2
WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin 8.5-8.9.3 - 8.9.2 - Subscriber+ Arbitrary Image Move vulnerability
5.8
15 minutes ago
WPLegalPages< 3.7.1
Unauthenticated API Secret Disclosure vulnerability
7.5
15 minutes ago
Events Manager< 7.4.1
Unauthenticated Privilege Escalation to Administrator vulnerability
8.1
17 minutes ago
WP OAuth Server< 6.3.1
Unauthenticated OAuth Token and User Data Disclosure vulnerability
7.5
22 minutes ago
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart< 2.1.2
Unauthenticated Arbitrary Price Manipulation vulnerability
7.5
23 minutes ago
Advanced File Manager< 5.4.13
Authenticated Arbitrary File Read and Write via fma_load_fma_ui vulnerability
7.5
24 minutes ago
Firebase Authentication< 1.7.1
Unauthenticated Account Takeover vulnerability
9.8
25 minutes ago
WPMU DEV Dashboard<= 5.0.1
Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion vulnerability
9.8
26 minutes ago
Product Input Fields for WooCommerce< 2.0.2
Unauthenticated Arbitrary File Upload vulnerability
10
32 minutes ago
Bit File Manager< 6.9.1
Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch vulnerability
8.1
37 minutes ago
Forminator< 1.57.1
Unauthenticated Multisite Site Creation and Privilege Escalation vulnerability
9.8
51 minutes ago
Everest Forms<= 3.4.4
Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value' vulnerability
7.2
1 hour ago
Shared Files Pro< 1.7.68
Unauthenticated Arbitrary File Deletion vulnerability
8.6
1 hour ago
Shared Files< 1.7.67
Unauthenticated Arbitrary File Deletion vulnerability
8.6
1 hour ago
WP User Frontend< 4.3.10
Editor+ PHP Object Injection vulnerability
7.2
1 hour ago
Ultimate Member2.6.7-2.12.1
Unauthenticated Privilege Escalation vulnerability
8.1
1 hour ago
WP Rocket<= 3.21.0.1
Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint vulnerability
7.1
1 hour ago