The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,110
Mitigations18,276
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WholesaleX< 3.0.9
Unauthenticated Imported User CSV Disclosure vulnerability
5.9
5 minutes ago
Profile Builder< 4.0.1
Reflected XSS vulnerability
7.1
5 minutes ago
Redirection for Contact Form 72.2.7-3.2.11
Unauthenticated Stored XSS vulnerability
7.1
9 minutes ago
WP Booking System< 2.1.0.3
Reflected XSS vulnerability
7.1
12 minutes ago
@apostrophecms/import-export< 3.7.0
NPM: ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
7.5
14 minutes ago
apostrophe< 4.33.0
NPM: ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
7.5
14 minutes ago
WC Ukraine Shipping< 1.23.4
Subscriber+ Arbitrary Shipping Label Deletion vulnerability
4.3
19 minutes ago
Simple Banner< 3.3.3
Authenticated Privilege Escalation vulnerability
7.5
25 minutes ago
Moloni< 5.0.14
Subscriber+ Arbitrary Order Invoice Generation vulnerability
6.5
31 minutes ago
Ettrick Escape Room Booking< 1.3.1
Unauthenticated Payment Confirmation Bypass vulnerability
5.3
36 minutes ago
Falang multilanguage< 1.4.6
Subscriber+ Stored XSS vulnerability
6.5
36 minutes ago
Synchrony Financing1.0.5-1.1.1
Unauthenticated Order Takeover vulnerability
6.5
52 minutes ago
Click n Chat (Chat Widget Integration)1.0.4-1.1.2
Unauthenticated SQLi vulnerability
9.3
57 minutes ago
Click n Chat (Chat Widget Integration)< 1.1.3
Unauthenticated SQLi vulnerability
9.3
1 hour ago
WholesaleX< 3.0.9
Unauthenticated Account Activation and Administrator Approval Bypass vulnerability
6.5
1 hour ago
Backup and Staging by WP Time Capsule< 1.22.28
Subscriber+ Staging-to-Live Deployment vulnerability
8.2
1 hour ago
Modern Events Calendar< 7.37.0
Subscriber+ SQLi vulnerability
7.7
1 hour ago
Modern Events Calendar Lite< 7.37.0
Subscriber+ SQLi vulnerability
7.7
1 hour ago
WP User Manager2.9.21-2.9.25
Unauthenticated Privilege Escalation vulnerability
8.1
1 hour ago
miniOrange's Google Authenticator6.2.9-6.3.0
2FA Bypass vulnerability
7.5
1 hour ago