The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total57,224
Mitigations19,346
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Give - Peer-to-Peer<= 2.9.5
WordPress Give - Peer-to-Peer plugin <= 2.9.5 - Authorization Bypass to Team Modification and Media Upload vulnerability
7.5
12 hours ago
Give - Peer-to-Peer<= 2.9.3
WordPress Give - Peer-to-Peer plugin <= 2.9.3 - Unauthenticated SQL Injection vulnerability
9.3
12 hours ago
Lazy Blocks< 3.0.0
Unauthenticated RCE vulnerability
10
13 hours ago
RegistrationMagic< 6.1.0.4
Reflected XSS vulnerability
7.1
13 hours ago
Auth Armor<= 1.0.3
Unauthenticated Account Takeover vulnerability
9.8
13 hours ago
A2Reviews<= 1.2.3
Unauthenticated Plugin Data Modification and Disclosure vulnerability
6.5
13 hours ago
Payment Gateway via Valitor for WooCommerce< 1.9.41
Unauthenticated Payment Bypass vulnerability
5.3
13 hours ago
Burst Statistics< 3.7.5
Unauthenticated Draft and Private Post Title Disclosure vulnerability
3.7
15 hours ago
Burst Statistics< 3.7.5
Unauthenticated Analytics Disclosure Beyond Shared Report Date Range vulnerability
5.3
15 hours ago
WPGraphQL< 2.27.1
Contributor+ Custom Post Status Content Disclosure vulnerability
3.1
15 hours ago
Restrict Content3.2.17-4.0.5
Subscriber+ Stripe Client Secret Disclosure and Payment Method Manipulation vulnerability
5.4
15 hours ago
Restrict Content< 4.0.6
Unauthenticated Table Collation Downgrade vulnerability
5.3
15 hours ago
RegistrationMagic5.2.3.1-6.1.0.3
Unauthenticated Non-Admin User Profile Modification vulnerability
5.3
15 hours ago
RegistrationMagic< 6.1.0.4
Admin+ SQLi vulnerability
4.1
15 hours ago
Cloud Storage Manager for Fluent Forms – Google Drive, Dropbox, OneDrive, S3 Uploads<= 1.2.0
Unauthenticated Arbitrary File Write vulnerability
10
1 day ago
memberdash<= 1.8.7
Authenticated (Subscriber+) Privilege Escalation to Administrator vulnerability
8.8
1 day ago
WP Ultimate CSV Importer Pro< 9.0.7
Unauthenticated Post Data Disclosure vulnerability
3.7
1 day ago
FooBox Image Lightbox <= 2.8.7
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 day ago
Multi Step for Contact Form<= 2.9.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
Lightbox with PhotoSwipe< 5.19.0
Unauthenticated Stored XSS vulnerability
7.1
1 day ago