Recently exploited vulnerabilities

Get more with our API
Affected software | Vulnerability
Priority
Disclosed
TranslatePress<= 3.3.1
Unauthenticated Account Takeover vulnerability
9.8
1 day ago
Amelia8.0-9.6.2
WordPress Booking for Appointments and Events Calendar - Amelia (Premium) plugin 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId' vulnerability
9.8
2 days ago
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent<= 4.4.1
Arbitrary File Upload vulnerability
10
3 days ago
Custom User Registration Fields for WooCommerce<= 2.2.3
Unauthenticated Privilege Escalation vulnerability
9.8
3 days ago
Events Manager< 7.4.1
Unauthenticated Privilege Escalation to Administrator vulnerability
8.1
6 days ago

WordPress vulnerability statistics

General WordPress security vulnerability statistics powered by the Patchstack Vulnerability Database.

Vulnerabilities disclosed via Patchstack

548By Patchstack Alliance
921By other sources

Most common security vulnerabilities

How to patch common vulnerabilities
  • #1Other vulnerabilities
    35.60%
  • #2Cross-Site Scripting (XSS)
    25.32%
  • #3Broken Access Control
    16.27%
  • #4SQL Injection
    10.82%
  • #5Sensitive Data Exposure
    7.15%
  • #6Arbitrary File Upload
    3.00%
  • #7Cross-Site Request Forgery (CSRF)
    1.84%
  • Disclosed by
    Patchstack
    Other sources

Patch status of published vulnerabilities

Not patched
#26318%
Patched
#1,20682%

Breakdown by software type

Plugin
#1,39395%
Theme
#654%
Core
#111%

Breakdown by patch priority

High (Resolve immediately)
#44630%
Medium (Resolve in 14 days)
#39827%
Low (Resolve in 30 days)
#62543%

Breakdown by CVSS severity

Critical (9.0-10.0)
#26818%
High (7.0-8.9)
#57039%
Medium (4.0-6.9)
#60141%
Low (0.1-3.9)
#302%

Top security researchers by contributions

See leaderboard
# Researcher
Reports
Country

Plugins with a VDP earn +15% XP and Zeroday payouts up to $33,000!

Read more