The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,902
Mitigations18,623
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Automated Import Products to Cart< 1.0.4
Subscriber+ Arbitrary File Read and Deletion vulnerability
9.9
10 minutes ago
vTables< 0.3
Unauthenticated SQL Injection vulnerability
9.3
11 minutes ago
Community Events< 1.6.0
Unauthenticated Stored XSS vulnerability
7.1
12 minutes ago
Chat AI with Dispatcher< 2.4
Unauthenticated Arbitrary File Upload vulnerability
10
13 minutes ago
PAYCOMET for WooCommerce5.36-5.45
Unauthenticated Stored Payment Token Overwrite vulnerability
6.5
13 minutes ago
LogixFast Auth< 1.0.4
Unauthenticated Account Takeover vulnerability
9.8
16 minutes ago
ProfileGrid< 6.0.0.5
Unauthenticated PHP Object Injection vulnerability
9
21 minutes ago
Frontend Dashboard< 3.0.5
Unauthenticated PHP Object Injection vulnerability
9
34 minutes ago
Two Factor Authentication< 1.17.0
Subscriber+ 2FA Bypass vulnerability
7.5
36 minutes ago
Hide Price Until Login< 1.1.2
Unauthenticated Account Creation vulnerability
5.3
40 minutes ago
Contact Form by Supsystic< 1.11.1
Unauthenticated CRLF / Email Header Injection vulnerability
3.7
2 hours ago
HT Mega<= 3.2.7
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
2 hours ago
Newsmatic<= 1.5.0
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Mapster WP Maps<= 2.0.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
LiteSpeed Cache<= 7.9.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
NewsmanApp<= 3.7.29
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Meta Box – WordPress Custom Fields Framework<= 5.15.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Everest Forms<= 3.6.2
Reflected Cross-Site Scripting vulnerability
7.1
2 hours ago
LiteSpeed Cache<= 7.9.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Greenshift<= 13.2.1
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
2 hours ago