Recently exploited vulnerabilities

Get more with our API

Affected software \| Vulnerability	Priority	Disclosed
ARMember Premium<= 7.3.1 Unauthenticated SQL Injection vulnerability	9.3	1 day ago
Spectra<= 2.19.25 Authenticated (Contributor+) Remote Code Execution vulnerability	8.8	3 days ago
WP Statistics<= 14.16.6 Cross Site Scripting (XSS) vulnerability	7.1	4 days ago
ACF Extended<= 0.9.2.5 Unauthenticated Privilege Escalation vulnerability	9.8	4 days ago
Link Whisper Free<= 0.9.0 Unauthenticated Stored Cross-Site Scripting vulnerability	7.1	7 days ago

WordPress vulnerability statistics

General WordPress security vulnerability statistics powered by the Patchstack Vulnerability Database.

Vulnerabilities disclosed via Patchstack

262By Patchstack Alliance

390By other sources

Most common security vulnerabilities

How to patch common vulnerabilities

#1Cross-Site Scripting (XSS)
29.91%
#2Other vulnerabilities
28.22%
#3Broken Access Control
20.25%
#4SQL Injection
8.90%
#5Cross-Site Request Forgery (CSRF)
7.67%
#6Sensitive Data Exposure
3.22%
#7Arbitrary File Upload
1.84%
Disclosed by
Patchstack
Other sources

Patch status of published vulnerabilities

Not patched

#23436%

Patched

#41864%

Breakdown by software type

Plugin

#57488%

Theme

#7812%

Core

#00%

Breakdown by patch priority

High (Resolve immediately)

#20031%

Medium (Resolve in 14 days)

#12219%

Low (Resolve in 30 days)

#33051%

Breakdown by CVSS severity

Critical (9.0-10.0)

#8012%

High (7.0-8.9)

#25038%

Medium (4.0-6.9)

#32249%

Low (0.1-3.9)

#00%

Top security researchers by contributions

See leaderboard

# Researcher

Reports

Country

Plugins with a VDP earn +15%
XP and
Zeroday payouts up to $33,000!
Plugins with a VDP earn +15% XP and Zeroday payouts up to $33,000!