Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,197
Mitigations
Mitigation rules
18,989
No official patch
13,631
In triage
998
Published soon
13
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Ak Framework
<= 2.9.8
Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Update vulnerability
8.8
1 hour ago
MapPress Maps for WordPress
< 2.97.15
Unauthenticated Email Address Disclosure vulnerability
5.3
1 day ago
Media LIbrary Assistant
< 3.44
Contributor+ Stored XSS vulnerability
6.5
1 day ago
Media LIbrary Assistant
< 3.44
Subscriber+ Missing Authorization vulnerability
4.3
1 day ago
Kali Forms
< 2.4.30
Subscriber+ Email Sending and Sender Spoofing vulnerability
4.3
1 day ago
Kali Forms
< 2.4.30
Subscriber+ User Email Address Disclosure vulnerability
4.3
1 day ago
PublishPress Authors
<= 4.17.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 day ago
WooCommerce PDF Invoices & Packing Slips
5.16.2-5.16.4
Unauthenticated Stored XSS vulnerability
7.1
1 day ago
NextGEN Gallery
<= 4.4.1
Authenticated (Custom+) Remote Code Execution vulnerability
8.8
1 day ago
FlexStock
<= 3.17.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 day ago
Relevanssi
<= 4.28.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
WP Directory Kit
<= 1.6.0
Unauthenticated SQL Injection vulnerability
9.3
2 days ago
Contact Form 7
6.2-6.2.3
Unauthenticated Arbitrary File Upload
8.1
2 days ago
Ninja Forms
<= 3.15.5
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
2 days ago
Independent Analytics Pro
<= 2.15.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
Buddyboss Platform
<= 3.6.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 days ago
Ninja Forms
<= 3.15.5
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
2 days ago
WooCommerce Extra Product Options Pro
<= 3.3.2
Reflected Cross-Site Scripting vulnerability
7.1
2 days ago
Essential Addons for Elementor
6.6.0-6.8.7
Author+ Privilege Escalation vulnerability
8.8
2 days ago
Debug Log Manager
<= 2.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 days ago
Load more