The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,054
Mitigations16,660
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
User Registration< 5.2.0
Unauthenticated Paid Membership Bypass vulnerability
5.3
19 minutes ago
Salon booking system< 10.30.20
Subscriber+ Booking Approval Bypass vulnerability
4.3
20 minutes ago
WebAuthn Provider for Two Factor< 2.5.6
2FA Bypass vulnerability
7.2
25 minutes ago
WP DSGVO Tools (GDPR)< 3.1.40
Unauthenticated Sensitive Information Disclosure via Subject Access Request vulnerability
7.5
35 minutes ago
WP Support Plus Responsive Ticket System<= 9.1.2
Unauthenticated Support Ticket Access via Session Cookie Forgery vulnerability
6.5
38 minutes ago
FluentForm< 6.2.1
Subscriber+ Subscription Cancellation via IDOR vulnerability
4.3
38 minutes ago
Advanced Form Integration< 2.1.1
Unauthenticated Privilege Escalation via Breakdance Form Role Mapping vulnerability
8.1
40 minutes ago
WP Adminify< 4.2.10
Contributor+ Sensitive Information Disclosure via Global Search AJAX vulnerability
4.3
45 minutes ago
FluentForm< 6.2.5
Form Manager+ Cross-Form Submission Entry Deletion via IDOR vulnerability
2.7
47 minutes ago
Everest Forms< 3.5.0
Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts vulnerability
5.3
47 minutes ago
Product Configurator for WooCommerce< 1.7.3
Unauthenticated Private/Draft Product Data Disclosure via pc_get_data vulnerability
5.3
56 minutes ago
Masteriyo - LMS< 2.2.1
Unauthenticated Course Progress Disclosure and Deletion vulnerability
6.5
58 minutes ago
WS Form LITE< 1.11.8
Subscriber+ Arbitrary Settings Update vulnerability
4.3
58 minutes ago
HUSKY< 1.4.1
WordPress HUSKY plugin < 1.4.1 - Products Filter Professional for WooCommerce < 1.4.1 - Shop Manager+ Local File Inclusion vulnerability
7.2
2 hours ago
AllCoach< 1.0.2
Unauthenticated Account Takeover vulnerability
9.8
22 hours ago
Filter & Grids< 3.11.3
Unauthenticated Private/Draft Post Disclosure vulnerability
5.3
23 hours ago
BookingPress< 1.5.6
Unauthenticated PHP Object Injection vulnerability
9.8
23 hours ago
ProfilePress< 4.16.17
Subscriber+ Subscription Cancellation via IDOR vulnerability
4.3
23 hours ago
WP Support Plus Responsive Ticket System<= 9.1.2
Unauthenticated SQL Injection via filter[elements] Array Keys vulnerability
9.3
23 hours ago
Everest Forms< 3.5.0
Unauthenticated Missing Authorization via Site Assistant REST Endpoints vulnerability
5.3
23 hours ago