Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
55,903
Mitigations
Mitigation rules
18,624
No official patch
13,646
In triage
1,033
Published soon
21
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
YITH PayPal Express Checkout for WooCommerce
<= 1.62.0
Broken Access Control vulnerability
5.3
53 minutes ago
All In One WP Security & Firewall
< 5.5.0
Subscriber+ 2FA Bypass vulnerability
7.5
2 hours ago
Automated Import Products to Cart
< 1.0.4
Subscriber+ Arbitrary File Read and Deletion vulnerability
9.9
2 hours ago
vTables
< 0.3
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Community Events
< 1.6.0
Unauthenticated Stored XSS vulnerability
7.1
2 hours ago
Chat AI with Dispatcher
< 2.4
Unauthenticated Arbitrary File Upload vulnerability
10
2 hours ago
PAYCOMET for WooCommerce
5.36-5.45
Unauthenticated Stored Payment Token Overwrite vulnerability
6.5
2 hours ago
LogixFast Auth
< 1.0.4
Unauthenticated Account Takeover vulnerability
9.8
2 hours ago
ProfileGrid
< 6.0.0.5
Unauthenticated PHP Object Injection vulnerability
9
2 hours ago
Frontend Dashboard
< 3.0.5
Unauthenticated PHP Object Injection vulnerability
9
2 hours ago
Two Factor Authentication
< 1.17.0
Subscriber+ 2FA Bypass vulnerability
7.5
2 hours ago
Hide Price Until Login
< 1.1.2
Unauthenticated Account Creation vulnerability
5.3
2 hours ago
Contact Form by Supsystic
< 1.11.1
Unauthenticated CRLF / Email Header Injection vulnerability
3.7
4 hours ago
HT Mega
<= 3.2.7
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
4 hours ago
Newsmatic
<= 1.5.0
Unauthenticated SQL Injection vulnerability
9.3
4 hours ago
Mapster WP Maps
<= 2.0.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
LiteSpeed Cache
<= 7.9.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
NewsmanApp
<= 3.7.29
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Meta Box – WordPress Custom Fields Framework
<= 5.15.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
Everest Forms
<= 3.6.2
Reflected Cross-Site Scripting vulnerability
7.1
4 hours ago
Load more