The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total50,989
Mitigations16,616
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Media LIbrary Assistant< 3.40
Author+ SQL Injection via mla_search_connector vulnerability
8.5
4 minutes ago
Tamara Checkout<= 1.9.9.20
Unauthenticated Order Status Manipulation vulnerability
5.3
4 minutes ago
Dokan< 5.0.14
Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied Amount vulnerability
2.7
5 minutes ago
Dokan< 5.0.14
Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint vulnerability
5.3
6 minutes ago
Link Whisper Free< 0.9.7
Editor+ SQL Injection via domain Parameter vulnerability
8.5
7 minutes ago
Drag and Drop Multiple File Upload – Contact Form 7< 1.3.9.9
Admin+ Stored XSS via drag_n_drop_heading_tag Setting vulnerability
5.9
7 minutes ago
NewPath WildApricotPress Add-on for Member Directory<= 1.0.0
WordPress NewPath WildApricotPress Add-on - Member Directory plugin <= 1.0.0 - Unauthenticated Member PII Disclosure via REST API vulnerability
5.3
8 minutes ago
Magazine Blocks<= 1.8.6
Cross Site Scripting (XSS) vulnerability
6.5
35 minutes ago
RepairBuddy<= 4.1223
Broken Access Control vulnerability
5.3
35 minutes ago
Hash Form<= 1.4.0
Cross Site Request Forgery (CSRF) vulnerability
4.3
40 minutes ago
Fluent Support Pro<= 2.3.1
Cross Site Request Forgery (CSRF) vulnerability
5.4
41 minutes ago
Fluent Boards Pro<= 2.0.11
Insecure Direct Object References (IDOR) vulnerability
5.3
41 minutes ago
FluentCRM Pro<= 3.1.12
Server Side Request Forgery (SSRF) vulnerability
4.9
42 minutes ago
Fluent Support Pro<= 2.3.1
Broken Access Control vulnerability
5.4
48 minutes ago
FluentCRM Pro<= 3.1.12
SQL Injection vulnerability
7.6
49 minutes ago
Shared Files<= 1.7.69
Server Side Request Forgery (SSRF) vulnerability
6.4
50 minutes ago
Booking and Rental Manager<= 2.7.5
Broken Access Control vulnerability
5.3
58 minutes ago
Templately< 3.7.1
Unauthenticated Administrator Templately Cloud Connection Overwrite vulnerability
6.5
3 hours ago
Kirki< 6.2.1
Unauthenticated Arbitrary Shortcode Execution via Form Email Actions vulnerability
6.5
3 hours ago
TeraWallet – For WooCommerce< 1.6.10
WordPress TeraWallet - Wallet for WooCommerce plugin < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up vulnerability
4.3
3 hours ago