The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,206
Mitigations18,992
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@bytebase/dbhub< 0.22.6
npm: DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
6.1
2 hours ago
@sd-jwt/core<= 0.19.0
npm: SD JWT JS: Tampered disclosures silently dropped instead of rejected
7.1
2 hours ago
@sd-jwt/decode<= 0.19.0
npm: SD JWT JS: Tampered disclosures silently dropped instead of rejected
7.1
2 hours ago
s2Member<= 260927
Unauthenticated Remote Code Execution vulnerability
10
9 hours ago
Ultimate Addons for Contact Form 7<= 3.5.54
Unauthenticated PHP Object Injection to Arbitrary File Deletion vulnerability
8.6
9 hours ago
PayHere Payment Gateway Plugin for WooCommerce2.4.0-2.4.5
Unauthenticated Payment Bypass vulnerability
5.3
11 hours ago
Ak Framework<= 2.9.8
Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Update vulnerability
8.8
13 hours ago
MapPress Maps for WordPress< 2.97.15
Unauthenticated Email Address Disclosure vulnerability
5.3
1 day ago
Media LIbrary Assistant< 3.44
Contributor+ Stored XSS vulnerability
6.5
1 day ago
Media LIbrary Assistant< 3.44
Subscriber+ Missing Authorization vulnerability
4.3
1 day ago
Kali Forms< 2.4.30
Subscriber+ Email Sending and Sender Spoofing vulnerability
4.3
1 day ago
Kali Forms< 2.4.30
Subscriber+ User Email Address Disclosure vulnerability
4.3
1 day ago
PublishPress Authors<= 4.17.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 days ago
WooCommerce PDF Invoices & Packing Slips5.16.2-5.16.4
Unauthenticated Stored XSS vulnerability
7.1
2 days ago
NextGEN Gallery<= 4.4.1
Authenticated (Custom+) Remote Code Execution vulnerability
8.8
2 days ago
FlexStock<= 3.17.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 days ago
Relevanssi <= 4.28.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
WP Directory Kit<= 1.6.0
Unauthenticated SQL Injection vulnerability
9.3
2 days ago
Contact Form 76.2-6.2.3
Unauthenticated Arbitrary File Upload
8.1
2 days ago
Ninja Forms<= 3.15.5
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
2 days ago