The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,417
Mitigations16,804
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Profile Builder< 4.0.1
Unauthenticated Unpublished Content and Media Modification vulnerability
8.3
1 hour ago
Nomupay Payment Processing Gateway<= 7.3
Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure vulnerability
8.2
1 hour ago
Geotargeting WP< 3.5.6.2
Reflected XSS vulnerability
7.1
1 hour ago
Frontend Admin by DynamiApps< 3.29.11
Subscriber+ Arbitrary Membership Plan Deletion vulnerability
5.3
1 hour ago
Groundhogg< 4.5.13
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
Rest Routes – Custom Endpoints for WP REST API<= 5.5.5
Unauthenticated SQLi vulnerability
9.3
1 hour ago
爱采集数据采集和发布插件<= 1.0.0
Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write vulnerability
7.5
1 hour ago
Uix UserCenter<= 1.0.3
Unauthenticated Privilege Escalation vulnerability
9.8
1 hour ago
Simple User Registration<= 6.9
Unauthenticated Privilege Escalation to Administrator vulnerability
9.8
1 hour ago
MyHome Core<= 4.4.5
Authentication Bypass to Account Takeover vulnerability
9.8
2 hours ago
Custom User Registration Fields for WooCommerce<= 2.2.3
Unauthenticated Privilege Escalation vulnerability
9.8
2 hours ago
bbPress<= 2.6.14
Broken Access Control vulnerability
5.3
2 hours ago
SigmaForms Pro – AI Generated Forms<= 1.4.5
Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability
10
2 hours ago
Customer Reviews for WooCommerce< 5.118.0
Unauthenticated Stored XSS vulnerability
7.1
2 hours ago
SAML SP Single Sign On<= 5.4.6
Unauthenticated Authentication Bypass vulnerability
7.5
2 hours ago
Really Simple SSL< 9.8.0
Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability
9.1
3 hours ago
HEL Online Classroom: AI-powered Online Classrooms<= 1.0.3
Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass vulnerability
5.3
3 hours ago
MStore API< 4.21.1
Subscriber+ Arbitrary Order Payment Bypass vulnerability
4.3
3 hours ago
爱采集数据采集和发布插件<= 1.0.0
Unauthenticated User and Term Creation vulnerability
5.3
8 hours ago
MW WP Form< 5.1.6
Editor+ Stored XSS vulnerability
5.9
1 day ago