The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing

Rated 4.9

Total52,917

MitigationsMitigation rules17,300

No official patch13,372

In triage1,389

Published soon21

StatsWordPress stats

CVSS0

Mitigation available

Exploited

Affected software \| Vulnerability	Risk	Disclosed
WP Review Slider Pro< 12.7.12 Subscriber+ Stored XSS vulnerability	6.5	29 minutes ago
File Manager7.2.2-8.0.4 Unauthenticated Database Backup Disclosure vulnerability	5.9	45 minutes ago
Verge3D4.1.0-4.13.0 Unauthenticated Payment Bypass vulnerability	5.3	45 minutes ago
Best Payments Plugin for WP4.6.20-4.6.25 Unauthenticated Payment Bypass vulnerability	5.3	45 minutes ago
Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification1.3.0-2.3.1 Blocked User Restriction Bypass vulnerability	5.4	45 minutes ago
Bookly< 28.3 Unauthenticated Payment Bypass vulnerability	5.3	46 minutes ago
Contact Form by WPForms1.5.0.1-2.0.2.0 Unauthenticated Arbitrary Shortcode Execution vulnerability	6.5	46 minutes ago
Malcure Malware Scanner< 19.9.7 Multisite Subsite Admin+ Arbitrary File Write and Deletion vulnerability	7.2	59 minutes ago
Verge3D<= 4.13.0 Unauthenticated Product Download Disclosure vulnerability	5.3	1 hour ago
WPeMatico RSS Feed Fetcher< 2.8.27 Contributor+ Post Publication and Author Spoofing vulnerability	4.9	1 hour ago
Download Manager4.0.0-7.5.5 Unauthenticated Stored XSS vulnerability	7.1	1 hour ago
Testimonials Widget<= 4.0.4 Unauthenticated SSRF vulnerability	5.8	1 hour ago
File Manager Pro< 2.1.3 DOM-based XSS vulnerability	7.1	1 hour ago
FileOrganizer< 1.2.1 DOM-based XSS vulnerability	7.1	1 hour ago
Bit File Manager< 8.0.5 DOM-based XSS vulnerability	7.1	1 hour ago
WP Review Slider Pro< 12.7.12 Subscriber+ Stored XSS vulnerability	6.5	1 hour ago
Bluff Post<= 1.1.1 Unauthenticated SQLi vulnerability	9.3	2 hours ago
SPS-Suite<= 1.4.0 Unauthenticated Time-Based SQLi vulnerability	9.3	2 hours ago
Post Voting System<= 1.0 Subscriber+ SQLi vulnerability	8.5	2 hours ago
Testimonials Widget<= 4.0.4 Unauthenticated Arbitrary Post Update vulnerability	7.5	2 hours ago