The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,344
Mitigations19,019
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
CatFolders< 2.5.7
Subscriber+ Folder Ownership Reset and User Restriction Disable vulnerability
3.1
2 hours ago
CatFolders< 2.5.7
Author+ SQLi vulnerability
8.5
2 hours ago
Dokan< 5.3.3
Admin+ Cross-Site Vendor Activation vulnerability
4.3
2 hours ago
Dokan< 5.3.3
Unauthenticated Email Sender Spoofing vulnerability
5.3
2 hours ago
Easy Social Icons< 4.0.3
Author+ Stored XSS vulnerability
6.5
2 hours ago
Car Dealer<= 4.73
Unauthenticated Private/Draft/Pending Post Content Disclosure vulnerability
5.3
2 hours ago
EWWW Image Optimizer< 8.9.1
Author+ Stored XSS vulnerability
6.5
2 hours ago
Essential Real Estate< 5.3.5
Customer+ Invoice PII Disclosure vulnerability
4.3
2 hours ago
Essential Real Estate< 5.3.5
Unauthenticated Unpublished Listing Image Disclosure vulnerability
5.3
2 hours ago
Easy Social Icons< 4.0.3
Admin+ Stored XSS vulnerability
3.5
2 hours ago
Essential Real Estate< 5.3.5
Unauthenticated Arbitrary Email Sending vulnerability
5.3
2 hours ago
YITH WooCommerce Gift Cards< 4.38.1
Unauthenticated Gift Card Balance Double-Spending vulnerability
3.7
2 hours ago
Subscriptions for WooCommerce2.0.0-2.1.0
Unauthenticated Membership Content Restriction Bypass vulnerability
5.3
2 hours ago
Community Events< 1.6.0
Unauthenticated Pending Events Disclosure vulnerability
5.3
2 hours ago
Tutor LMS< 4.2.0
Subscriber+ Quiz Answer Key Disclosure vulnerability
4.3
2 hours ago
FV Flowplayer Video Player< 7.5.56.7212
Contributor+ SSRF vulnerability
5
2 hours ago
FV Flowplayer Video Player< 7.5.56.7212
Contributor+ Stored XSS vulnerability
6.5
2 hours ago
FV Flowplayer Video Player< 7.5.56.7212
Subscriber+ Cloud Storage File Disclosure vulnerability
4.3
2 hours ago
GiveWP<= 4.19.1
Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter vulnerability
8.8
11 hours ago
Motors<= 1.4.128
Authenticated (Subscriber+) File Deletion vulnerability
8.1
11 hours ago