The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total49,442
Mitigations15,973
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Autopay dla WooCommerce<= 2.2.27
Broken Access Control vulnerability
6.5
4 days ago
WooCommerce Product Stock Alert<= 3.0.6
Sensitive Data Exposure vulnerability
6.5
4 days ago
CorvusPay WooCommerce Payment Gateway<= 2.7.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 days ago
Ultimate Auction Pro<= 2.4.5
Reflected XSS via uwa_manage_auctions vulnerability
7.1
6 days ago
Ultimate Auction Pro<= 2.4.5
Reflected XSS via uwa_auctions_bids_list vulnerability
7.1
6 days ago
WooCommerce Bulk Edit Products – WP Sheet Editor<= 1.8.21
Broken Access Control vulnerability
4.9
12/07/2026
TeraWallet – For WooCommerce<= 1.6.4
Missing Authorization to Authenticated (Subscriber+) User/Email Enumeration vulnerability
4.3
10/07/2026
WCFM – Frontend Manager for WooCommerce<= 6.7.27
Missing Authorization to Unauthenticated Arbitrary Inquiry Reply Injection vulnerability
5.3
10/07/2026
WCFM – Frontend Manager for WooCommerce<= 6.7.27
Authenticated (Subscriber+) Missing Authorization to Arbitrary Vendor Data Manipulation vulnerability
4.3
10/07/2026
WCFM Marketplace<= 3.7.3
Authenticated (Vendor+) Stored Cross-Site Scripting vulnerability
6.5
10/07/2026
Affiliate Program & Referral Tracking for WooCommerce & WordPress – Affilia<= 3.3.3
Missing Authorization to Authenticated (Subscriber+) Arbitrary Status Modification vulnerability
4.3
10/07/2026
WooCommerce PDF Invoices & Packing Slips<= 5.14.0
Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure vulnerability
4.3
10/07/2026
Points and Rewards for WooCommerce<= 2.10.1
Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification vulnerability
4.3
10/07/2026
Mail Mint<= 1.24.1
Authenticated (Administrator+) SQL Injection vulnerability
7.6
09/07/2026
Membership For WooCommerce<= 3.1.0
Arbitrary File Deletion vulnerability
8.6
09/07/2026
APIExperts Square for WooCommerce<= 4.7.4
SQL Injection vulnerability
8.5
09/07/2026
Abandoned Cart Recovery for WooCommerce<= 1.1.12
Broken Authentication vulnerability
6.5
08/07/2026
Razorpay Payment Links for WooCommerce<= 2.1.4
Broken Access Control vulnerability
6.5
08/07/2026
Bopo – WooCommerce Product Bundle Builder<= 1.2.0
Reflected Cross Site Scripting (XSS) vulnerability
7.1
08/07/2026
Stock Locations for WooCommerce<= 3.1.8
Broken Access Control vulnerability
6.5
08/07/2026