The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,869
Mitigations18,213
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
User Registration<= 5.2.8
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
4.3
11 hours ago
Kirki<= 6.3.2
Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure vulnerability
7.5
12 hours ago
Filter & Grids<= 3.12.19
Authenticated (Author+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
12 hours ago
Rank Math SEO PRO3.0.123
Unauthenticated Embedded Malicious Code vulnerability
9.8
12 hours ago
GetPaid<= 2.8.61
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 hours ago
European VAT Compliance Assistant for WooCommerce<= 1.36.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
12 hours ago
weForms<= 1.6.28
Unauthenticated Limited Media File Deletion vulnerability
5.4
12 hours ago
LearnPress<= 4.4.10
Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration vulnerability
6.5
12 hours ago
LatePoint<= 5.7.4
Unauthenticated Authentication Bypass vulnerability
9.1
1 day ago
WP Booking System<= 2.1.0.3
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
6.5
1 day ago
User Registration<= 5.2.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
WooCommerce EU VAT Assistant<= 2.1.30.260413
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
@aborruso/ckan-mcp-server< 0.4.112
NPM: ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
3.1
1 day ago
LearnPress<= 4.4.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
LearnPress<= 4.4.10
Unauthenticated PHP Object Injection vulnerability
9.8
1 day ago
WP Booking System<= 2.1.0.3
Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability
6.8
1 day ago
WP Booking System<= 2.1.0.3
Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
1 day ago
Tutor LMS<= 4.1.0
Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Course Modification and Ownership Takeover vulnerability
4.3
1 day ago
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN<= 1.4.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 day ago
Post Export Import with Media<= 1.17.2
Authenticated (Administrator+) Path Traversal vulnerability
4.9
1 day ago