Recently exploited vulnerabilities

Get more with our API
Affected software | Vulnerability
Priority
Disclosed
REST API Log<= 1.7.1
Sensitive Data Exposure vulnerability
7.5
5 days ago
MultiVendorX<= 5.0.10
Broken Access Control vulnerability
7.5
5 days ago
WPMU DEV Dashboard<= 5.0.0
Authentication Bypass to Arbitrary plugin Installation (Remote Code Execution) vulnerability
8.1
6 days ago
Type Hub<= 2.0.6
Arbitrary File Upload vulnerability
10
6 days ago
Kali Forms<= 2.4.20
Unauthenticated Remote Code Execution vulnerability
10
7 days ago

WordPress vulnerability statistics

General WordPress security vulnerability statistics powered by the Patchstack Vulnerability Database.

Vulnerabilities disclosed via Patchstack

4,352By Patchstack Alliance
1,593By other sources

Most common security vulnerabilities

How to patch common vulnerabilities
  • #1Cross-Site Scripting (XSS)
    53.36%
  • #2Cross-Site Request Forgery (CSRF)
    16.85%
  • #3Broken Access Control
    12.95%
  • #4Other vulnerabilities
    8.85%
  • #5SQL Injection
    4.46%
  • #6Sensitive Data Exposure
    2.00%
  • #7Arbitrary File Upload
    1.53%
  • Disclosed by
    Patchstack
    Other sources

Patch status of published vulnerabilities

Not patched
#1,50125%
Patched
#4,44475%

Breakdown by software type

Plugin
#5,75397%
Theme
#1793%
Core
#130%

Breakdown by patch priority

High (Resolve immediately)
#83014%
Medium (Resolve in 14 days)
#2,05735%
Low (Resolve in 30 days)
#3,05851%

Breakdown by CVSS severity

Critical (9.0-10.0)
#1893%
High (7.0-8.9)
#2,36440%
Medium (4.0-6.9)
#3,35856%
Low (0.1-3.9)
#341%

Top security researchers by contributions

See leaderboard
# Researcher
Reports
Country

Plugins with a VDP earn +15% XP and Zeroday payouts up to $33,000!

Read more