The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,309
Mitigations16,719
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
FoodBoxBooker< 1.0.7
Unauthenticated Arbitrary Password Reset vulnerability
9.8
25 minutes ago
AI Engine3.3.3-3.7.1
WordPress AI Engine plugin 3.3.3-3.7.2 - 3.7.1 - Subscriber+ Arbitrary File Read vulnerability
7.5
41 minutes ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Read vulnerability
7.5
47 minutes ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Deletion vulnerability
8.6
50 minutes ago
Workeera< 1.0.6
Subscriber+ Arbitrary File Upload vulnerability
9.9
59 minutes ago
WpEvently<= 5.5.0
Broken Access Control vulnerability
4.3
1 hour ago
WpEvently<= 5.5.0
Broken Access Control vulnerability
5.4
1 hour ago
WP Job Portal<= 2.5.9
Insecure Direct Object References (IDOR) vulnerability
4.3
1 hour ago
RestrictMate< 1.3.0
Unauthenticated Privilege Escalation to Administrator vulnerability
9.8
1 hour ago
WPCargo Track & Trace< 8.0.4
Unauthenticated SQL Injection via wpcargo_tracking_number vulnerability
9.3
1 hour ago
ACF Extended<= 0.9.2.6
Broken Access Control vulnerability
4.3
1 hour ago
All-in-One Video Gallery< 4.9.2
Subscriber+ Server-Side Request Forgery via 'vdl' Parameter vulnerability
6.4
2 hours ago
Forminator< 1.57.0.5
Admin+ Network-Wide RCE via Hub Connector API Key on Multisite vulnerability
7.2
2 hours ago
MC4WP<= 4.12.0
Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages vulnerability
5.9
2 hours ago
Post Duplicator<= 3.0.11
Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution vulnerability
4.3
2 hours ago
Advanced Classifieds & Directory Pro< 3.4.3
Unauthenticated Non-Public Listing Custom Field Disclosure vulnerability
5.3
2 hours ago
Block User Account< 2.0.1
Subscriber+ Account Block Bypass via Application Passwords vulnerability
5.4
2 hours ago
Contact Form to Any API< 3.0.7
Unauthenticated Sensitive File Disclosure via Predictable Filename vulnerability
5.3
2 hours ago
Salon booking system< 10.30.34
WordPress Salon Booking System - Free Version plugin < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizard vulnerability
5.3
2 hours ago
Salon booking system<= 10.31.3
WordPress Salon Booking System - Free Version plugin <= 10.31.3 - Unauthenticated Google Calendar Connection Hijack via OAuth Callback vulnerability
4.8
2 hours ago