Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
53,308
Mitigations
Mitigation rules
17,460
No official patch
13,361
In triage
1,263
Published soon
68
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
LearnPress
<= 4.4.9
Insecure Direct Object References (IDOR) vulnerability
5.3
19 minutes ago
Advanced Ads
<= 2.0.26
Sensitive Data Exposure vulnerability
4.3
37 minutes ago
Download Manager
<= 3.3.71
Sensitive Data Exposure vulnerability
5.3
44 minutes ago
W3 Total Cache
<= 2.10.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
CMB2
<= 2.13.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
DoFollow Case by Case
<= 3.6.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
BA Book Everything
<= 1.8.28
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Greenshift
<= 13.2.0
Reflected Cross-Site Scripting vulnerability
7.1
2 hours ago
MW WP Form
<= 5.1.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
GSpeech TTS
<= 3.22.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Customer Reviews for WooCommerce
<= 5.122.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Autoptimize
<= 3.1.15.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Visitor Traffic Real Time Statistics Pro
<= 11.22
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
SiteOrigin Widgets Bundle
<= 1.73.2
Authenticated (Contributor+) Local File Inclusion vulnerability
7.5
2 hours ago
JetAppointment
<= 2.5.2.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Avada
<= 7.16.1
Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago
Forminator
<= 1.57.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
JSON API Auth
<= 3.1.2
Unauthenticated Authentication Bypass vulnerability
9.8
3 hours ago
Divi Membership
<= 2.2.0
Unauthenticated Privilege Escalation via 'form_id' Parameter vulnerability
9.8
3 hours ago
Divi Membership
<= 2.3.0
Unauthenticated Authentication Bypass via 'paypal_param' Parameter vulnerability
9.8
3 hours ago
Load more