The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total53,338
Mitigations17,484
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
LearnPress<= 4.4.9.1
Broken Access Control vulnerability
4.3
42 minutes ago
Booking Calendar<= 11.8.4
Race Condition vulnerability
3.7
43 minutes ago
Aculect AI Companion<= 0.8.1
Unvalidated Redirects and Forwards vulnerability
4.7
44 minutes ago
WDS MCP Content Manager<= 3.10.4
Broken Access Control vulnerability
4.3
45 minutes ago
PublishPress Series<= 3.1.3
Insecure Direct Object References (IDOR) vulnerability
5.4
46 minutes ago
WebSamurai<= 1.0.7
Broken Access Control vulnerability
6.5
48 minutes ago
Airano MCP Bridge<= 2.11.0
Broken Access Control vulnerability
6.5
50 minutes ago
Smart One Click Setup – Complete Demo Import &amp; Export<= 1.4.3
Sensitive Data Exposure vulnerability
5.3
51 minutes ago
IATO MCP<= 1.11.0
Broken Access Control vulnerability
6.5
52 minutes ago
ThemeREX Addons<= 2.46.0
Server Side Request Forgery (SSRF) vulnerability
6.4
2 hours ago
ThemeREX Addons<= 2.46.0
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
OMGF | Host Google Fonts Locally< 6.3.11
Unauthenticated DoS vulnerability
5.9
3 hours ago
CMP – Coming Soon & Maintenance< 4.1.20
Unauthenticated Maintenance Mode Bypass vulnerability
5.3
3 hours ago
JetFormBuilder<= 3.6.5.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
LearnPress<= 4.4.9
Insecure Direct Object References (IDOR) vulnerability
5.3
5 hours ago
Advanced Ads<= 2.0.26
Sensitive Data Exposure vulnerability
4.3
5 hours ago
Download Manager<= 3.3.72
Sensitive Data Exposure vulnerability
5.3
6 hours ago
W3 Total Cache<= 2.10.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
CMB2<= 2.13.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
7 hours ago
DoFollow Case by Case<= 3.6.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
7 hours ago