The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,204
Mitigations16,691
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Formidable Forms<= 6.33.1
Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter vulnerability
7.1
21 minutes ago
WP Fastest Cache <= 1.5.0
Unauthenticated Stored Cross-Site Scripting via HTTP Host Header vulnerability
7.1
32 minutes ago
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels<= 4.9.8
Authenticated (Subscriber+) Arbitrary File Read vulnerability
6.5
33 minutes ago
Forminator<= 1.57.0.2
Unauthenticated Stored Cross-Site Scripting via Radio Field (Save and Continue Draft) vulnerability
7.1
52 minutes ago
Forminator<= 1.57.0
Unauthenticated DOM-Based Cross-Site Scripting via 'error_description' Parameter vulnerability
7.1
1 hour ago
Ultimate Member<= 2.12.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
WooCommerce Lottery<= 2.2.9
Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters vulnerability
9.3
1 hour ago
Classified Listing - Mobile Number Verification<= 1.6.0
WordPress Classified Listing - Mobile Number Verification plugin <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login vulnerability
8.1
1 hour ago
WP ERP<= 1.17.8
Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment vulnerability
10
1 hour ago
Security Hardener<= 2.4.4
Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
2 hours ago
InfusedWoo Pro<= 5.1.17
Authenticated (Subscriber+) Privilege Escalation vulnerability
9.8
2 hours ago
SmilePass Selfie Login<= 1.0.2
Unauthenticated Authentication Bypass vulnerability
9.8
2 hours ago
Social Login & Sharing buttons with Analytics By SoClever<= 1.2.0
Unauthenticated Authentication Bypass vulnerability
9.8
2 hours ago
WP Social Media Login<= 1.0.6
Unauthenticated Account Takeover vulnerability
9.8
2 hours ago
MalCare Security5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
2 hours ago
BlogVault5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
2 hours ago
The WP Remote WordPress Plugin5.16-6.62
Unauthenticated Site Takeover via Connection Key Recovery vulnerability
8.1
2 hours ago
CM Map Locations<= 2.1.8
Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action vulnerability
8.8
3 hours ago
Mang Board WP<= 2.3.7
Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie vulnerability
8.8
4 hours ago
Noptin< 4.3.3
Unauthenticated Subscriber PII and confirm_key Disclosure vulnerability
5.3
4 hours ago