The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,674
Mitigations16,467
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Media LIbrary Assistant<= 3.39
Cross Site Scripting (XSS) vulnerability
6.5
2 minutes ago
HashBar – WordPress Notification Bar<= 2.0.0
Cross Site Request Forgery (CSRF) vulnerability
8.8
14 minutes ago
Draft List<= 2.6.4
Cross Site Scripting (XSS) vulnerability
6.5
16 minutes ago
meshcentral< 1.1.60
NPM: MeshCentral has unsanitized data fields
8.3
2 hours ago
magicmirror< 2.37.0
NPM: MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables
4.3
4 hours ago
@geolens/sdk< 1.2.3
NPM: GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
7.5
4 hours ago
magicmirror< 2.37.0
NPM: MagicMirror: ssrf calendar .js
6.3
4 hours ago
magicmirror< 2.37.0
NPM: MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery
6.3
4 hours ago
magicmirror< 2.37.0
NPM: MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions
2.3
4 hours ago
WP Travel Engine<= 6.8.4
Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' Parameter vulnerability
7.5
5 hours ago
StoreEngine<= 2.1.1
Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URL vulnerability
6.5
5 hours ago
ProSolution WP Client< 2.0.9
Subscriber+ SSRF via proSol_url_validate vulnerability
6.4
5 hours ago
WPC Admin Columns< 2.3.4
Subscriber+ Arbitrary User/Post/Term Meta Disclosure vulnerability
6.5
5 hours ago
WP Photo Album Plus< 9.2.07.002
Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal vulnerability
5.3
5 hours ago
WP Photo Album Plus< 9.2.07.002
Reflected XSS via lbstart vulnerability
7.1
5 hours ago
WP Travel Engine< 6.8.5
Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cart vulnerability
6.5
5 hours ago
KiviCare< 4.5.2
Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint vulnerability
8.5
5 hours ago
RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg< 1.5.2
Subscriber+ Stored XSS vulnerability
6.5
5 hours ago
wpForo Forum< 3.1.2
Subscriber+ Stored XSS vulnerability
6.5
5 hours ago
Gallery For Google Photos< 1.2.1
Unauthenticated Google OAuth Token Disclosure vulnerability
7.5
5 hours ago