The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,374
Mitigations16,315
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP Event SOlution< 4.1.20
Unauthenticated Account Creation via Waiting List Endpoint vulnerability
5.3
1 hour ago
KiviCare< 4.5.2
Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOR vulnerability
6.5
1 hour ago
WP Event SOlution< 4.1.20
Contributor+ Order Information Disclosure via IDOR vulnerability
4.3
2 hours ago
WP Event SOlution< 4.1.20
Contributor+ Customer PII Disclosure via REST API vulnerability
4.3
2 hours ago
LearnPress< 4.4.4
Subscriber+ Sensitive Information Exposure via AI Assistant vulnerability
4.3
2 hours ago
Tourmaster< 5.4.8
Stored XSS vulnerability
7.1
2 hours ago
WP Photo Album Plus< 9.2.04.003
Subscriber+ Stored XSS vulnerability
6.5
2 hours ago
CubeWP<= 1.1.30
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
2 hours ago
WordPress<= 7.0.3
Authenticated (Author+) File Type Confusion to Remote Code Execution vulnerability
9.1
17 hours ago
GiveWP< 4.16.6
Cross Site Scripting (XSS) vulnerability
6.5
20 hours ago
Revolut Gateway for WooCommerce< 4.22.10
Broken Access Control vulnerability
5.3
20 hours ago
GiveWP< 4.16.6
Broken Access Control vulnerability
5.3
21 hours ago
MailChimp For WooCommerce< 6.2
SQL Injection vulnerability
7.6
21 hours ago
WP Data Access<= 5.5.79
Cross Site Scripting (XSS) vulnerability
5.9
21 hours ago
Featured Image from URL<= 5.3.3
Cross Site Scripting (XSS) vulnerability
6.5
21 hours ago
Ninja Tables Pro5.2.11
Backdoor vulnerability
10
22 hours ago
Fluent Forms Pro Add On Pack6.2.7
Backdoor vulnerability
10
22 hours ago
Formidable Digital Signatures<= 3.0.6
Unauthenticated Arbitrary File Deletion via Signature Field vulnerability
8.6
1 day ago
Passwordless Login by VentraConnect<= 1.4.3
WordPress Social Login, Passkeys, Magic Link & Email OTP - Passwordless Login by VentraConnect plugin <= 1.4.3 - Unauthenticated Authentication Bypass via Spotify OAuth Callback vulnerability
8.1
1 day ago
Frontend Admin by DynamiApps<= 3.29.9
Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token vulnerability
8.8
1 day ago