The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,361
Mitigations19,029
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
YaySMTP<= 2.7.8
Authenticated (Administrator+) SQL Injection vulnerability
4.9
4 hours ago
Redirection for Contact Form 7<= 3.2.14
Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File Copy vulnerability
5.3
4 hours ago
WP Event Solution<= 4.1.29
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
4.3
4 hours ago
Parsi Date<= 6.4
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
VOD Infomaniak<= 1.5.15
Missing Authorization to Authenticated (Subscriber+) Unauthorized Video Importation vulnerability
4.3
4 hours ago
UsersWP<= 1.2.80
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
WpTravelly<= 2.3.11
Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure vulnerability
6.5
4 hours ago
Permalink Manager Lite<= 2.6.1
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
Posts Table with Search & Sort<= 1.4.14
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
filecoin-pin<= 1.1.0
npm: filecoin-pin: Unbounded DAG pinning can exhaust server resources
6.5
7 hours ago
Ultimate Security For WooCommerce: IP Restriction, Password Policy and More1.0.10-1.0.16
Unauthenticated Privilege Escalation vulnerability
9.8
15 hours ago
WP Event Manager< 3.4.2
Unauthenticated Unpublished Post Overwrite vulnerability
8.2
15 hours ago
All In One Login< 2.5.0
Unauthenticated Account Takeover vulnerability
9.8
16 hours ago
WP PageNavi Style<= 1.4
Stored XSS vulnerability
7.1
16 hours ago
Dokan< 5.3.3
Unauthenticated Order PII Disclosure and Note Manipulation vulnerability
6.5
16 hours ago
IVPAY payments<= 1.0.8
Unauthenticated SQLi vulnerability
9.3
16 hours ago
Cloud Blocks<= 1.1.8
Unauthenticated Stored XSS vulnerability
7.1
16 hours ago
BuddyPress Xprofile Custom Fields Type<= 2.6.3
Authenticated (Custom+) Arbitrary File Deletion vulnerability
6.5
16 hours ago
My Calendar3.8.8-3.8.10
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
16 hours ago
Product Gallery Slider for WooCommerce2.3.23-2.3.35
Missing Authorization vulnerability
4.3
16 hours ago