Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,752
Mitigations
Mitigation rules
19,215
No official patch
13,630
In triage
1,111
Published soon
8
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Basel Post Types
<= 1.18
Unauthenticated Authentication Bypass vulnerability
9.8
4 hours ago
Everest Forms
<= 3.6.3
Unauthenticated Arbitrary File Read vulnerability
7.5
5 hours ago
Cargo Shipping Location for WooCommerce
< 6.0
Unauthenticated Order Status Manipulation vulnerability
5.3
5 hours ago
FraudLabs Pro SMS Verification
<= 1.12.1
Unauthenticated Unrestricted SMS Sending vulnerability
5.3
5 hours ago
Everest Forms
<= 3.6.2
Unauthenticated Arbitrary File Deletion vulnerability
8.6
6 hours ago
BulletProof Security
<= 7.2
Unauthenticated Sensitive Data Disclosure vulnerability
5.9
6 hours ago
All in One Addons For WPBakery Page Builder (formerly Visual Composer)
<= 1.2
Contributor+ LFI vulnerability
7.1
6 hours ago
ZionBuilder
<= 3.6.17
Author+ Stored XSS vulnerability
6.5
8 hours ago
@anthropic-ai/claude-code
< 2.1.251
npm: Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace
7.7
15 hours ago
moleculer
< 0.14.36
npm: Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser
7.5
15 hours ago
@tsparticles/mcp-server
< 4.3.2
npm: tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients
6.9
17 hours ago
@tsparticles/mcp-server
<= 4.3.0
npm: tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process
8.7
17 hours ago
@tsparticles/mcp-server
< 4.3.1
npm: tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS
7.5
17 hours ago
ag-psd
<= 31.0.0
npm: ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)
7.5
17 hours ago
isomorphic-git
<= 1.38.5
npm: isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout
5.3
18 hours ago
isomorphic-git
<= 1.38.5
npm: isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)
4.3
18 hours ago
isomorphic-git
<= 1.38.5
npm: isomorphic-git: Arbitrary file write outside of working tree via directory symlink during checkout (potential RCE)
8.8
18 hours ago
Fusion Builder
<= 3.16.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
18 hours ago
ARMember Premium
<= 7.8.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
18 hours ago
Ultimate Addons for Contact Form 7
<= 3.5.54
Unauthenticated Arbitrary File Read vulnerability
7.5
18 hours ago
Load more