The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,923
Mitigations16,590
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Product Shortlist<= 1.0.4
Unauthenticated SQL Injection via get_shortlisted_products vulnerability
9.3
3 minutes ago
SmartCrawl< 3.16.3
Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration vulnerability
4.3
7 minutes ago
Simple File List<= 6.3.11
Unauthenticated Stored XSS via File Description vulnerability
7.1
9 minutes ago
Simple File List<= 6.3.11
Unauthenticated Arbitrary File Read and Move via Path Traversal vulnerability
7.5
12 minutes ago
User Verification<= 2.0.47
Unauthenticated Arbitrary Account Lockout via IDOR vulnerability
7.5
19 minutes ago
Easy Media Replace<= 0.2.0
Author+ Stored XSS via Attachment Title vulnerability
5.9
22 minutes ago
YayCurrency< 3.3.5
Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration vulnerability
5.3
22 minutes ago
Quiz And Survey Master< 11.2.4
Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR vulnerability
4.3
25 minutes ago
Quiz And Survey Master< 11.2.4
Contributor+ Arbitrary Quiz Text Settings Update via IDOR vulnerability
4.3
26 minutes ago
Booking calendar, Appointment Booking System<= 3.2.36
Unauthenticated Stored XSS via SVG File Upload vulnerability
7.1
28 minutes ago
10Web Booster – Website speed optimization, Cache & Page Speed optimizer< 2.33.5
Unauthenticated Stored XSS via Critical CSS Token Bypass vulnerability
4.7
38 minutes ago
WCFM Marketplace< 3.8.1
Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR vulnerability
4.3
38 minutes ago
Dinatur<= 1.18
Unauthenticated SQL Injection via Column Name Injection vulnerability
9.3
39 minutes ago
WP Event SOlution< 4.1.21
Contributor+ Schedule Deletion and Modification via IDOR vulnerability
4.3
40 minutes ago
WP Event SOlution< 4.1.21
Contributor+ User Role and Meta Modification via Speaker Creation vulnerability
4.3
41 minutes ago
WP Event SOlution< 4.1.21
Contributor+ Speaker Account Deletion via IDOR vulnerability
4.3
41 minutes ago
WP Event SOlution< 4.1.21
Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR vulnerability
5.4
42 minutes ago
Gift Cards For WooCommerce Pro< 4.2.10
Unauthenticated Arbitrary File Upload vulnerability
10
47 minutes ago
gettext-converter< 1.3.3
NPM: gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
6.9
12 hours ago
@nocobase/server< 2.1.5
NPM: NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution
0
13 hours ago