The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total55,107
Mitigations18,262
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP User Manager2.9.21-2.9.25
Unauthenticated Privilege Escalation vulnerability
8.1
3 minutes ago
miniOrange's Google Authenticator6.2.9-6.3.0
2FA Bypass vulnerability
7.5
4 minutes ago
Happyforms< 1.26.15
Unauthenticated HTML Injection in Admin Notification Email vulnerability
5.4
3 hours ago
Contest Gallery< 34.0.1
Unauthenticated Vote Restriction Bypass vulnerability
5.3
3 hours ago
Simple Shopping Cart5.1.3-5.3.2
Contributor+ Price Manipulation vulnerability
2.7
3 hours ago
Payment Gateway for Telcell< 2.0.5
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
3 hours ago
Duplicator Pro<= 4.6.10
Unauthenticated PHP Object Injection vulnerability
9.8
5 hours ago
Duplicator<= 1.5.17
Unauthenticated PHP Object Injection vulnerability
9.8
5 hours ago
Click n Chat (Chat Widget Integration)1.0.4-1.1.2
Unauthenticated Lead Data Disclosure vulnerability
5.3
6 hours ago
Wava Payment0.3.1-0.3.9
Unauthenticated Order Status Change vulnerability
5.3
6 hours ago
Download Manager4.0.0-7.5.8
Privacy Settings Update vulnerability
4.3
6 hours ago
Download Manager< 3.3.71
Privacy Settings Update vulnerability
4.3
6 hours ago
Formidable Forms< 7.0
Unauthenticated Payment Gateway Connect Verification DoS vulnerability
5.3
6 hours ago
Elementor Website Builder< 4.3.5
Contributor+ Stored XSS vulnerability
6.8
6 hours ago
Elementor Website Builder< 4.3.5
Author+ Stored XSS vulnerability
6.4
6 hours ago
Advanced File Manager< 6.0.0
Authenticated Stored XSS vulnerability
5.9
6 hours ago
TI WooCommerce Wishlist< 2.13.0
Unauthenticated Private Wishlist Disclosure vulnerability
5.3
6 hours ago
SUMIT Payment Gateway for WooCommerce< 4.0.0
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
6 hours ago
Easy Pricing Tables< 4.1.3
Contributor+ Arbitrary Post Clone and Publish vulnerability
5.5
6 hours ago
Kliken: Ads + Pixel for Meta< 1.2.3
Unauthenticated Order Data Disclosure vulnerability
5.3
6 hours ago