Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,562
Mitigations
Mitigation rules
19,153
No official patch
13,627
In triage
1,110
Published soon
11
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
MC Woocommerce Wishlist
<= 2.0.3
Cross Site Scripting (XSS) vulnerability
6.5
3 minutes ago
Fluent Booking
<= 2.5.0
Broken Access Control vulnerability
5.3
7 minutes ago
WP Recipe Maker
<= 10.9.1
Cross Site Scripting (XSS) vulnerability
6.5
8 minutes ago
WCFM Marketplace
<= 3.8.3
Broken Access Control vulnerability
4.3
11 minutes ago
WCFM Marketplace
<= 3.8.3
Cross Site Scripting (XSS) vulnerability
6.5
12 minutes ago
myCred
<= 4.0.2
Broken Access Control vulnerability
5.3
13 minutes ago
Wp Social
<= 3.2.3
Cross Site Request Forgery (CSRF) vulnerability
5.4
14 minutes ago
VOD Infomaniak
<= 1.5.15
Broken Access Control vulnerability
4.3
15 minutes ago
weDocs
<= 2.6.1
Broken Access Control vulnerability
5.3
16 minutes ago
WP-Lister Lite for Amazon
<= 2.9.2
Broken Access Control vulnerability
5.3
19 minutes ago
YITH WooCommerce Subscription
<= 4.22.0
Sensitive Data Exposure vulnerability
5.3
21 minutes ago
ProfilePress
<= 4.17.7
Content Injection vulnerability
5.3
21 minutes ago
WP-Members
<= 3.5.7
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
VikBooking Hotel Booking Engine & PMS
<= 1.8.17
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
FV Flowplayer Video Player
< 7.5.57.7212
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
WP User Frontend
<= 4.3.13
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
AutomatorWP
<= 6.0.4
Unauthenticated Privilege Escalation to Insufficient Role Validation in Anonymous Automation 'Role' Option vulnerability
7.5
1 hour ago
Motors
<= 1.4.125
Authenticated (Subscriber+) Arbitrary File Deletion vulnerability
8.1
1 hour ago
Fiber Admin
3.1.0-4.0.0
Unauthenticated RCE vulnerability
10
1 hour ago
FunnelKit Payment Gateway for Stripe WooCommerce
<= 1.15.0.2
Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure vulnerability
7.5
1 hour ago
Load more