The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total57,224
Mitigations19,341
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
A2Reviews<= 1.2.3
Unauthenticated Plugin Data Modification and Disclosure vulnerability
6.5
8 minutes ago
Payment Gateway via Valitor for WooCommerce< 1.9.41
Unauthenticated Payment Bypass vulnerability
5.3
9 minutes ago
Burst Statistics< 3.7.5
Unauthenticated Draft and Private Post Title Disclosure vulnerability
3.7
1 hour ago
Burst Statistics< 3.7.5
Unauthenticated Analytics Disclosure Beyond Shared Report Date Range vulnerability
5.3
1 hour ago
WPGraphQL< 2.27.1
Contributor+ Custom Post Status Content Disclosure vulnerability
3.1
1 hour ago
Restrict Content3.2.17-4.0.5
Subscriber+ Stripe Client Secret Disclosure and Payment Method Manipulation vulnerability
5.4
1 hour ago
Restrict Content< 4.0.6
Unauthenticated Table Collation Downgrade vulnerability
5.3
1 hour ago
RegistrationMagic5.2.3.1-6.1.0.3
Unauthenticated Non-Admin User Profile Modification vulnerability
5.3
1 hour ago
RegistrationMagic< 6.1.0.4
Admin+ SQLi vulnerability
4.1
1 hour ago
Cloud Storage Manager for Fluent Forms – Google Drive, Dropbox, OneDrive, S3 Uploads<= 1.2.0
Unauthenticated Arbitrary File Write vulnerability
10
17 hours ago
memberdash<= 1.8.7
Authenticated (Subscriber+) Privilege Escalation to Administrator vulnerability
8.8
23 hours ago
WP Ultimate CSV Importer Pro< 9.0.7
Unauthenticated Post Data Disclosure vulnerability
3.7
23 hours ago
FooBox Image Lightbox <= 2.8.7
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
23 hours ago
Multi Step for Contact Form<= 2.9.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
23 hours ago
Lightbox with PhotoSwipe< 5.19.0
Unauthenticated Stored XSS vulnerability
7.1
23 hours ago
Checkout Files Upload for WooCommerce< 2.4.1
Unauthenticated Stored XSS vulnerability
7.1
23 hours ago
Swipe<= 1.4
Unauthenticated Authentication Bypass vulnerability
8.1
23 hours ago
Shipo1.6-1.8.0
Authentication Bypass to Administrator vulnerability
9.8
23 hours ago
BuddyForms<= 2.10.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
FV Player 8<= 8.1.9
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 day ago