Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
54,558
Mitigations
Mitigation rules
18,072
No official patch
13,692
In triage
926
Published soon
83
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Hyyan WooCommerce Polylang Integration
<= 1.5.0
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
58 minutes ago
Directorist
<= 8.10.2.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
59 minutes ago
PO/MO Editor
<= 1.4.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Cryptocurrency Donation Box – Bitcoin & Crypto Donations
<= 2.2.13
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Document Gallery
<= 5.1.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Social Share Buttons & Analytics Plugin – GetSocial.io
<= 4.5
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
AGE-GATE
<= 1.0
Unauthenticated Remote Code Execution vulnerability
9.8
1 hour ago
WP Event Solution
<= 4.1.25
Broken Access Control vulnerability
5.3
1 hour ago
Download Monitor integration for WooCommerce
<= 1.0.3
Broken Access Control vulnerability
4.3
1 hour ago
Premium Addons for Elementor
<= 4.11.110
Broken Access Control vulnerability
5.3
1 hour ago
Widget Countdown
3.0.0-3.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Fusion Builder
<= 3.16.1
Unauthenticated Sensitive Information Exposure in 'args[link_target]' Parameter vulnerability
5.3
2 hours ago
AnyComment
<= 0.3.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
WooCommerce Bookings
< 3.11.0
Unauthenticated Denial of Service vulnerability
5.9
2 hours ago
Bit Integrations
<= 2.10.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Abandoned Cart Pro for WooCommerce
<= 10.8.0
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Abandoned Cart Pro for WooCommerce
<= 10.8.0
Unauthenticated SQL Injection vulnerability
9.3
2 hours ago
Abandoned Cart Pro for WooCommerce
<= 10.8.0
Unauthenticated Authentication Bypass vulnerability
9.8
2 hours ago
Snazzy Social Media Feed
<= 2.5
Unauthenticated Arbitrary File Upload vulnerability
9.8
3 hours ago
Contact Form 7 Database Addon – CFDB7
<= 1.4.1
Unauthenticated Limited File Deletion vulnerability
5.3
3 hours ago
Load more