Skip to main content
JavaScript is disabled in your browser. Please enable JavaScript for a better experience.
Pricing
Solutions
WordPress security
For hosts
Managed VDP
Bug bounty
Plugin auditing
Vulnerability database
Resources
Case studies
Security advisories
WordPress security 101
2025 security whitepaper
CRA compliance guide
Login
$event.target.closest('button').nextElementSibling.querySelector('.oxy-site-navigation__mobile-close-wrapper > button').focus() )" aria-label="Open navigation menu" :aria-expanded="rootOpen" x-ref="openButton">
$refs.openButton.focus() )" x-init="menu = [{'ID':19943,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2024-12-13 14:11:25','post_content':'','post_title':'Pricing','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'pricing-2','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=19943','menu_order':1,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':19943,'menu_item_parent':'0','object_id':'19943','object':'custom','type':'custom','type_label':'Custom Link','title':'Pricing','url':'\/pricing\/','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-custom','menu-item-object-custom'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':9674,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2022-03-03 08:57:59','post_content':'','post_title':'Solutions','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'solutions-2','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=9674','menu_order':2,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':9674,'menu_item_parent':'0','object_id':'9674','object':'custom','type':'custom','type_label':'Custom Link','title':'Solutions','url':'','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-custom','menu-item-object-custom'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':13562,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2023-05-05 05:23:43','post_content':'','post_title':'WordPress security','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'13562','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=13562','menu_order':3,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':13562,'menu_item_parent':'9674','object_id':'13440','object':'page','type':'post_type','type_label':'Page','url':'https:\/\/patchstack.com\/wordpress-security\/','title':'WordPress security','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-post_type','menu-item-object-page'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':16873,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2024-02-16 07:20:20','post_content':'','post_title':'For hosts','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'enterprise-api','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=16873','menu_order':4,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':16873,'menu_item_parent':'9674','object_id':'14712','object':'page','type':'post_type','type_label':'Page','url':'https:\/\/patchstack.com\/for-hosts\/','title':'For hosts','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-post_type','menu-item-object-page'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':18973,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2024-09-10 14:41:32','post_content':'','post_title':'Managed VDP','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'managed-vdp','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=18973','menu_order':5,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':18973,'menu_item_parent':'9674','object_id':'18393','object':'page','type':'post_type','type_label':'Page','url':'https:\/\/patchstack.com\/for-plugins\/','title':'Managed VDP','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-post_type','menu-item-object-page'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':18975,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2024-09-10 14:43:02','post_content':'','post_title':'Bug bounty','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'18975','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=18975','menu_order':6,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':18975,'menu_item_parent':'9674','object_id':'16699','object':'page','type':'post_type','type_label':'Page','url':'https:\/\/patchstack.com\/bug-bounty\/','title':'Bug bounty','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-post_type','menu-item-object-page'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':16728,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2024-01-25 12:48:02','post_content':'','post_title':'Plugin auditing','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'plugin-auditing','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=16728','menu_order':7,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':16728,'menu_item_parent':'9674','object_id':'13739','object':'page','type':'post_type','type_label':'Page','url':'https:\/\/patchstack.com\/auditing\/','title':'Plugin auditing','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-post_type','menu-item-object-page'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':9673,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2022-03-03 08:40:22','post_content':'','post_title':'Vulnerability database','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'9673','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=9673','menu_order':8,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':9673,'menu_item_parent':'9674','object_id':'3349','object':'page','type':'post_type','type_label':'Page','url':'https:\/\/patchstack.com\/database\/','title':'Vulnerability database','target':'_blank','attr_title':'','description':'','classes':['','menu-item','menu-item-type-post_type','menu-item-object-page'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':22161,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2025-05-12 07:54:30','post_content':'','post_title':'Resources','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'resources-2','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=22161','menu_order':9,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':22161,'menu_item_parent':'0','object_id':'22161','object':'custom','type':'custom','type_label':'Custom Link','title':'Resources','url':'','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-custom','menu-item-object-custom'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':22162,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2025-05-12 07:54:30','post_content':'','post_title':'Case studies','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'case-studies','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=22162','menu_order':10,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':22162,'menu_item_parent':'22161','object_id':'22162','object':'custom','type':'custom','type_label':'Custom Link','title':'Case studies','url':'https:\/\/patchstack.com\/category\/case-studies\/','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-custom','menu-item-object-custom'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':22163,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2025-05-12 07:54:30','post_content':'','post_title':'Security advisories','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'security-advisories','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=22163','menu_order':11,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':22163,'menu_item_parent':'22161','object_id':'22163','object':'custom','type':'custom','type_label':'Custom Link','title':'Security advisories','url':'https:\/\/patchstack.com\/category\/security-advisories\/','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-custom','menu-item-object-custom'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':22164,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2025-05-12 07:54:30','post_content':'','post_title':'WordPress security 101','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'wordpress-security-101','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=22164','menu_order':12,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':22164,'menu_item_parent':'22161','object_id':'22164','object':'custom','type':'custom','type_label':'Custom Link','title':'WordPress security 101','url':'https:\/\/patchstack.com\/category\/wordpress-security-lessons-101\/','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-custom','menu-item-object-custom'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':22165,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2025-05-12 07:54:30','post_content':'','post_title':'2025 security whitepaper','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'2025-security-whitepaper','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=22165','menu_order':13,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':22165,'menu_item_parent':'22161','object_id':'22165','object':'custom','type':'custom','type_label':'Custom Link','title':'2025 security whitepaper','url':'https:\/\/patchstack.com\/whitepaper\/state-of-wordpress-security-in-2025\/','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-custom','menu-item-object-custom'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':22600,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2025-06-05 08:51:38','post_content':'','post_title':'CRA compliance guide','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'cra-compliance-guide','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=22600','menu_order':14,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':22600,'menu_item_parent':'22161','object_id':'22469','object':'page','type':'post_type','type_label':'Page','url':'https:\/\/patchstack.com\/whitepaper\/cyber-resilience-act-checklist\/','title':'CRA compliance guide','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-post_type','menu-item-object-page'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''},{'ID':9663,'post_author':'9','post_date':'2025-06-05 08:51:38','post_date_gmt':'2022-03-02 06:00:36','post_content':'','post_title':'Login','post_excerpt':'','post_status':'publish','comment_status':'closed','ping_status':'closed','post_password':'','post_name':'login-2','to_ping':'','pinged':'','post_modified':'2025-06-05 08:51:38','post_modified_gmt':'2025-06-05 08:51:38','post_content_filtered':'','post_parent':0,'guid':'https:\/\/patchstack.com\/?p=9663','menu_order':15,'post_type':'nav_menu_item','post_mime_type':'','comment_count':'0','filter':'raw','db_id':9663,'menu_item_parent':'0','object_id':'9663','object':'custom','type':'custom','type_label':'Custom Link','title':'Login','url':'https:\/\/app.patchstack.com\/login','target':'','attr_title':'','description':'','classes':['','menu-item','menu-item-type-custom','menu-item-object-custom'],'xfn':'','current':false,'current_item_ancestor':false,'current_item_parent':false,'menu_image':''}];" x-data="{ useCtaStyles: 'false', howManyCtas: '1' }">
Start trial
Latest
WordPress Security
Virtual Patches
Bug Bounty
WordPress Security 101
Events
WordPress how-to's
Webinars
Security Suite
Plugin Recommendations
Security Advice
Security Advisories
Patchstack News
Patchstack how-to's
Security Advisories
Author's position will be here
Security Advisories
Latest
WordPress Security 101
Plugin Recommendations
Security Advisories
Patchstack News
Case Studies
Bug Bounty
Search for:
22 May, 2024
Critical Vulnerability Patched in UserPro Plugin
privilege escalation
account takeover
UserPro
Critical Vulnerability
17 May, 2024
Exploring the Unknown: Beneath the Surface of Unpatched WordPress SSRF
WordPress core
ssrf
14 May, 2024
Critical Vulnerabilities Found in XStore Theme and Plugin
Critical Vulnerability
account takeover
php object injection
SQL Injection
arbitrary option update
XStore
7 May, 2024
High Priority Vulnerabilities Patched in Uncode Core Plugin
plugin
privilege escalation
Uncode
arbitrary file deletion
4 April, 2024
Unpatched Authenticated RCE in Oxygen and Breakdance Builder
rce
oxygen
breakdance
remote code execution
privilege escalation
3 April, 2024
Critical Vulnerabilities Patched in REHub Theme and Plugin
Critical Vulnerability
SQL Injection
REHub
Local File Inclusion
19 March, 2024
Critical Vulnerabilities Patched in WordPress Automatic Plugin
Critical Vulnerability
ssrf
SQL Injection
Automatic
Arbitrary File Download
12 March, 2024
Critical Vulnerability Found in GOTMLS Plugin
Critical Vulnerability
rce
27 February, 2024
XSS Vulnerability in LiteSpeed Cache Plugin Affecting 4+ Million Sites
xss
LiteSpeed Cache
19 February, 2024
Critical RCE Patched in Bricks Builder Theme
Bricks Builder
31 January, 2024
WordPress 6.4.3 Security Release
wordpress
9 January, 2024
AI Engine Plugin Affected by Critical Vulnerability
arbitrary file upload
AI Engine
Critical Vulnerability
« Previous
1
2
3
4
5
6
…
10
Next »
Load more
Monthly security advice
Get the latest WordPress security intelligence delivered to your inbox.
NEW
: Get started with 5 bite-sized security lessons.
Email Signup
Email
Subscribe
Website security
Pricing
For WordPress
For WooCommerce
For agencies
API for hosts
Documentation
Log in
For plugin devs
Managed VDP
Log in
Active programs
Security auditing
Compliance (CRA)
For researchers
Bug bounty
Log in
Guidelines
Leaderboard
Learn
Discord
Resources
Vulnerability database
Whitepaper 2025
Vulnerability statistics
Case studies
Articles
Patchstack
About
Careers
Merch store
Media kit
Socials
LinkedIn
Facebook
X
© 2025
Patchstack
DPA
Privacy Policy
Terms & Conditions
Website security
Pricing
For WordPress
For WooCommerce
For agencies
API for hosts
Documentation
Log in
For plugin devs
Managed VDP
Log in
Active programs
Security auditing
Compliance (CRA)
For researchers
Bug bounty
Log in
Guidelines
Leaderboard
Learn
Discord
Resources
Vulnerability database
Whitepaper 2025
Vulnerability statistics
Case studies
Articles
Patchstack
About
Careers
Merch store
Media kit
Socials
LinkedIn
Facebook
X
© 2025
Patchstack
DPA
Privacy Policy
Terms & Conditions
Looks like your browser is blocking our support chat widget. Turn off adblockers and reload the page.
Reload page
close
chevron-down
bars
cross
menu