Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
55,592
Mitigations
Mitigation rules
18,560
No official patch
13,642
In triage
997
Published soon
52
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
CMB2
<= 2.13.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 minutes ago
Prime Slider – Addons For Elementor
<= 4.7.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 minutes ago
Postie
<= 1.9.87
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
17 minutes ago
IvyForms
<= 1.5.1
Authenticated (Custom+) Arbitrary File Upload vulnerability
8.8
19 minutes ago
WpEvently
<= 5.7.8
Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter vulnerability
7.2
20 minutes ago
Knowledge Base for Documentation, FAQs with AI Assistance
<= 17.214.0
Reflected Cross-Site Scripting vulnerability
7.1
23 minutes ago
MxChat
<= 3.2.25
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
31 minutes ago
My auctions allegro
<= 4.0.3
Broken Access Control vulnerability
5.4
38 minutes ago
Checkout Files Upload for WooCommerce
< 2.4.0
Unauthenticated Arbitrary File Upload vulnerability
10
1 hour ago
GoSMTP – SMTP for WordPress
< 1.2.5
Plugin Activator+ Privilege Escalation vulnerability
7.2
1 hour ago
Contact Manager
<= 9.1.2
Unauthenticated Arbitrary File Upload vulnerability
9.8
1 hour ago
VikRentCar
<= 1.4.8
Cross-Site Request Forgery to Remote Code Execution vulnerability
8.8
1 hour ago
Customer Email Verification for WooCommerce
<= 2.8.2
Unauthenticated Authentication Bypass vulnerability
4.8
4 hours ago
Lumise Product Designer
<= 2.1.2
Unauthenticated Arbitrary File Read vulnerability
7.5
4 hours ago
Recipe Card Blocks for Gutenberg & Elementor
3.5.0-3.6.3
Contributor+ SQLi vulnerability
8.5
5 hours ago
Popup by Supsystic
< 2.0.2
Unauthenticated SSRF vulnerability
5.4
5 hours ago
Popup by Supsystic
< 2.0.2
Admin+ SQLi vulnerability
4.1
5 hours ago
GeoDirectory
< 2.8.195
Contributor+ Non-Public Listing Disclosure vulnerability
4.3
5 hours ago
GeoDirectory
< 2.8.196
Contributor+ Stored XSS vulnerability
6.5
5 hours ago
GeoDirectory
< 2.8.196
Contributor+ Stored XSS vulnerability
6.5
5 hours ago
Load more