The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total52,438
Mitigations17,100
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Breeze1.2.5-2.5.14
Unauthenticated Cache Poisoning vulnerability
6.5
6 minutes ago
Easy Form Builder4.0.0-4.1.3
WordPress Easy Form Builder by WhiteStudio plugin 4.0.0-4.1.3- Unauthenticated Registration Policy Bypass vulnerability
5.3
7 minutes ago
Really Simple SSL8.1.6-9.8.2
Unauthenticated Unbounded Option Growth vulnerability
5.9
10 minutes ago
iGMS Direct Booking< 2.0
Unauthenticated Stored XSS vulnerability
7.1
11 minutes ago
Generate PDF using Contact Form 7< 4.2.2
Unauthenticated Server-Side Request Forgery vulnerability
5.8
11 minutes ago
UpsellWP1.4.4-2.2.9
Unauthenticated Price Manipulation vulnerability
5.3
12 minutes ago
Filter Gallery1.1.2-1.1.4
Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion vulnerability
7.1
12 minutes ago
BookIt< 2.6.0.5
Bookit Staff+ Arbitrary Appointment Deletion vulnerability
2.7
16 minutes ago
paella-core< 1.50.6
NPM: Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text
8.7
17 minutes ago
All Bootstrap Blocks1.3.20-1.3.31
Contributor+ LFI vulnerability
6.6
18 minutes ago
Printcart Web to Print Product Designer for WooCommerce<= 2.8.5
Unauthenticated Arbitrary File Read vulnerability
7.5
19 minutes ago
Mapster WP Maps<= 1.23.0
Authenticated (Subscriber+) Arbitrary User Meta Write vulnerability
8.8
20 minutes ago
WP Multi Store Locator Pro<= 4.5.1
Unauthenticated SQL Injection vulnerability
9.3
20 minutes ago
Yo1.1-1.3.1
Unauthenticated SQL Injection via username Parameter vulnerability
9.3
24 minutes ago
GeoDirectory Location Manager<= 2.3.38
Unauthenticated SQL Injection vulnerability
9.3
30 minutes ago
WP Shortcut Link<= 1.2.0
Unauthenticated SQL Injection vulnerability
9.3
30 minutes ago
Product Question and Answer<= 1.1.0
Unauthenticated SQL Injection vulnerability
9.3
31 minutes ago
Tz Weekly Radio Schedule<= 1.8.1
Unauthenticated SQL Injection vulnerability
9.3
31 minutes ago
Tz Weekly Radio Schedule<= 1.8.1
Unauthenticated SQLi vulnerability
9.3
31 minutes ago
Paid Member Subscriptions< 3.0.9
Unauthenticated Membership Payment Bypass vulnerability
5.3
2 hours ago