The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,864
Mitigations16,559
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Speed Optimizer<= 7.8.0
Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes vulnerability
6.5
5 minutes ago
PPWP<= 1.9.15
Improper Authorization To Authenticated (Contributor+) Master Password Exposure vulnerability
4.3
6 minutes ago
Tourmaster< 5.4.9
Unauthenticated Sensitive Data Disclosure via Order Export vulnerability
5.3
10 minutes ago
Vitepos< 3.6.0
Outlet Manager+ Privilege Escalation vulnerability
7.2
11 minutes ago
Vitepos< 3.6.0
Outlet Manager+ Privilege Escalation vulnerability
7.2
11 minutes ago
Amelia< 9.7
Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR vulnerability
3.8
19 minutes ago
AutoNetTV Relay< 3.0.14
Unauthenticated Privilege Escalation via Scheduled Sync Cron vulnerability
8.1
20 minutes ago
HT Contact Form 7< 2.9.3
Unauthenticated Saved Form Draft Data Disclosure vulnerability
3.7
21 minutes ago
WP Events Manager< 2.2.5
Subscriber+ Payment Bypass via 'qty' Parameter vulnerability
4.3
22 minutes ago
SEO Redirection< 9.19
WordPress SEO Redirection Plugin - 301 Redirect Manager plugin < 9.19 - Subscriber+ Redirect Rule Disclosure vulnerability
5.3
24 minutes ago
Payment Plugins for PayPal WooCommerce< 2.0.20
Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order vulnerability
5.3
26 minutes ago
SiteGround Security< 1.6.5
WordPress Security Optimizer - The All-In-One Protection Plugin plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password vulnerability
5.3
27 minutes ago
Buckaroo Woocommerce Payments Plugin< 4.9.0
Subscriber+ Unauthorized Order Refund vulnerability
5.3
28 minutes ago
Essential Blocks for Gutenberg< 6.4.0
Unauthenticated WooCommerce Sales Data Disclosure via REST products Endpoint vulnerability
5.3
29 minutes ago
Essential Blocks for Gutenberg< 6.4.0
Unauthenticated Non-Public Custom Post Type Content Disclosure via queries Endpoint vulnerability
5.3
29 minutes ago
LearnPress< 4.4.4
Instructor+ Server-Side Request Forgery via openai_apply_image_feature vulnerability
6.4
30 minutes ago
Super Store Finder<= 7.8
Unauthenticated SQL Injection via ssf_tracking vulnerability
9.3
31 minutes ago
GetPaid< 2.8.55
Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification vulnerability
5.3
34 minutes ago
wpForo Forum< 3.1.3
Subscriber+ Account Status and Reputation Manipulation via Profile Update Mass Assignment vulnerability
4.3
35 minutes ago
Redsys for WooCommerce Light< 7.0.2
Unauthenticated Payment Confirmation via Unverified Inespay Callback vulnerability
5.3
36 minutes ago