The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,417
Mitigations16,802
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Nomupay Payment Processing Gateway<= 7.3
Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure vulnerability
8.2
Just now
Geotargeting WP< 3.5.6.2
Reflected XSS vulnerability
7.1
12 minutes ago
Frontend Admin by DynamiApps< 3.29.11
Subscriber+ Arbitrary Membership Plan Deletion vulnerability
5.3
20 minutes ago
Groundhogg< 4.5.13
Unauthenticated Stored XSS vulnerability
7.1
26 minutes ago
Rest Routes – Custom Endpoints for WP REST API<= 5.5.5
Unauthenticated SQLi vulnerability
9.3
39 minutes ago
爱采集数据采集和发布插件<= 1.0.0
Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write vulnerability
7.5
44 minutes ago
Uix UserCenter<= 1.0.3
Unauthenticated Privilege Escalation vulnerability
9.8
45 minutes ago
Simple User Registration<= 6.9
Unauthenticated Privilege Escalation to Administrator vulnerability
9.8
48 minutes ago
MyHome Core<= 4.4.5
Authentication Bypass to Account Takeover vulnerability
9.8
59 minutes ago
Custom User Registration Fields for WooCommerce<= 2.2.3
Unauthenticated Privilege Escalation vulnerability
9.8
1 hour ago
bbPress<= 2.6.14
Broken Access Control vulnerability
5.3
1 hour ago
SigmaForms Pro – AI Generated Forms<= 1.4.5
Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability
10
1 hour ago
Customer Reviews for WooCommerce< 5.118.0
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
SAML SP Single Sign On<= 5.4.6
Unauthenticated Authentication Bypass vulnerability
7.5
1 hour ago
Really Simple SSL< 9.8.0
Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability
9.1
2 hours ago
HEL Online Classroom: AI-powered Online Classrooms<= 1.0.3
Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass vulnerability
5.3
2 hours ago
MStore API< 4.21.1
Subscriber+ Arbitrary Order Payment Bypass vulnerability
4.3
2 hours ago
爱采集数据采集和发布插件<= 1.0.0
Unauthenticated User and Term Creation vulnerability
5.3
7 hours ago
MW WP Form< 5.1.6
Editor+ Stored XSS vulnerability
5.9
1 day ago
WPvivid Backup and Migration< 0.9.133
Admin+ Arbitrary File Write vulnerability
9.1
1 day ago