The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,844
Mitigations17,266
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WordPress<= 7.1.1
Unauthenticated Local File Inclusion to Remote Code Execution vulnerability
9.2
2 days ago
WordPress<= 7.1
Cross Site Scripting (XSS) vulnerability
7.1
7 days ago
WordPress<= 7.1
Broken Access Control vulnerability
6.6
7 days ago
WordPress<= 7.1
Contributor+ Arbitrary Post Overwrite vulnerability
6.5
7 days ago
WordPress<= 7.1
Author+ Custom CSS Capability Bypass via XML-RPC vulnerability
6.4
7 days ago
WordPress<= 7.1
Subscriber+ Comment and Note Reparenting vulnerability
5.4
7 days ago
WordPress<= 7.1
Admin+ Stored XSS in Custom Header Images vulnerability
4.8
7 days ago
WordPress<= 7.1
Contributor+ Stored XSS via HTML API Comment Breakout vulnerability
4.4
7 days ago
WordPress<= 7.1
Cross-Site Request Forgery to Theme Install and Preview vulnerability
4.3
7 days ago
WordPress<= 7.1
Contributor+ Path Traversal in REST Templates Controller vulnerability
4.3
7 days ago
WordPress<= 7.1
Author+ Private Parent Post Title Disclosure vulnerability
4.3
7 days ago
WordPress<= 7.1
Contributor+ Draft and Pending Post Slug Disclosure vulnerability
4.3
7 days ago
WordPress<= 7.0.3
Authenticated (Author+) File Type Confusion to Remote Code Execution vulnerability
9.1
12/08/2026
WordPress< 7.0.3
Email Confirmation Bypass vulnerability
5.3
11/08/2026
WordPress< 7.0.3
SSRF vulnerability
5.4
07/08/2026
WordPress< 7.0.3
CSS Injection vulnerability
5.9
07/08/2026
WordPress< 7.0.3
Sensitive Data Exposure vulnerability
5.3
07/08/2026
WordPress< 7.0.3
Sensitive Data Exposure vulnerability
5.3
07/08/2026
WordPress< 7.0.3
Stored XSS vulnerabiliity
6.5
07/08/2026
WordPress7.0-7.0.2
Unauthenticated Sensitive Data Exposure vulnerability
5.3
06/08/2026