Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,407
Mitigations
Mitigation rules
19,064
No official patch
13,631
In triage
1,111
Published soon
2
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Quick Event Manager
9.9.5-9.18
Unauthenticated PayPal IPN Verification Bypass vulnerability
5.3
5 hours ago
WP Libre Form
<= 1.5.0.1
Unauthenticated RCE vulnerability
10
5 hours ago
Mobile DJ Manager
<= 1.7.8.7
Subscriber+ Stored XSS vulnerability
6.5
6 hours ago
Mobile Events Manager
<= 1.7.8.7
Subscriber+ Stored XSS vulnerability
6.5
6 hours ago
Mobile Events Manager
<= 1.7.8.7
Subscriber+ Account Takeover vulnerability
8.8
6 hours ago
Mobile DJ Manager
<= 1.7.8.7
Subscriber+ Account Takeover vulnerability
8.8
6 hours ago
Mobile Events Manager
<= 1.7.8.7
Unauthenticated Arbitrary Role Deletion vulnerability
9.1
6 hours ago
Mobile DJ Manager
<= 1.7.8.7
Unauthenticated Arbitrary Role Deletion vulnerability
9.1
6 hours ago
AutomatorWP
< 6.0.7
Unauthenticated Zoom/AWeber Integration Connection Hijack vulnerability
5.6
6 hours ago
Spam protection, AntiSpam, FireWall by CleanTalk
< 6.91
Unauthenticated Stored XSS vulnerability
7.1
6 hours ago
Advanced Custom Fields
< 6.8.11
Unauthenticated Stored XSS vulnerability
7.1
6 hours ago
iubenda
< 3.13.7
Unauthenticated Stored XSS vulnerability
7.1
7 hours ago
All-in-One Video Gallery
< 5.1.0
Subscriber+ Stored XSS vulnerability
6.5
7 hours ago
Surfer
< 1.8.1.759
Contributor+ Privilege Escalation vulnerability
8.1
7 hours ago
Ever Accounting
< 2.3.3
Accounting Manager+ Arbitrary File Deletion vulnerability
8.7
7 hours ago
Wurdey
<= 1.0.0
Unauthenticated Administrator Authentication Bypass vulnerability
9.8
7 hours ago
MCB
<= 1.0.0
Unauthenticated Stored XSS vulnerability
7.1
7 hours ago
AMP for WP
<= 1.1.18
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
7 hours ago
BuddyForms
<= 2.10.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
7 hours ago
Smart Cookie Kit
<= 2.3.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
7 hours ago
Load more