The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,902
Mitigations18,624
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
All In One WP Security & Firewall< 5.5.0
Subscriber+ 2FA Bypass vulnerability
7.5
31 minutes ago
Automated Import Products to Cart< 1.0.4
Subscriber+ Arbitrary File Read and Deletion vulnerability
9.9
42 minutes ago
vTables< 0.3
Unauthenticated SQL Injection vulnerability
9.3
44 minutes ago
Community Events< 1.6.0
Unauthenticated Stored XSS vulnerability
7.1
44 minutes ago
Chat AI with Dispatcher< 2.4
Unauthenticated Arbitrary File Upload vulnerability
10
45 minutes ago
PAYCOMET for WooCommerce5.36-5.45
Unauthenticated Stored Payment Token Overwrite vulnerability
6.5
45 minutes ago
LogixFast Auth< 1.0.4
Unauthenticated Account Takeover vulnerability
9.8
48 minutes ago
ProfileGrid< 6.0.0.5
Unauthenticated PHP Object Injection vulnerability
9
53 minutes ago
Frontend Dashboard< 3.0.5
Unauthenticated PHP Object Injection vulnerability
9
1 hour ago
Two Factor Authentication< 1.17.0
Subscriber+ 2FA Bypass vulnerability
7.5
1 hour ago
Hide Price Until Login< 1.1.2
Unauthenticated Account Creation vulnerability
5.3
1 hour ago
Contact Form by Supsystic< 1.11.1
Unauthenticated CRLF / Email Header Injection vulnerability
3.7
2 hours ago
HT Mega<= 3.2.7
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
2 hours ago
Newsmatic<= 1.5.0
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Mapster WP Maps<= 2.0.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
LiteSpeed Cache<= 7.9.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
NewsmanApp<= 3.7.29
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Meta Box – WordPress Custom Fields Framework<= 5.15.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
Everest Forms<= 3.6.2
Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago
LiteSpeed Cache<= 7.9.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago