Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
51,623
Mitigations
Mitigation rules
16,875
No official patch
13,329
In triage
1,108
Published soon
40
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
SureForms
<= 2.12.5
Insecure Direct Object References (IDOR) vulnerability
5.3
38 minutes ago
Ultimate Maps by Supsystic
<= 1.5.3
Broken Access Control vulnerability
5.3
38 minutes ago
KP Agent Ready
<= 1.1.99
Sensitive Data Exposure vulnerability
5.3
39 minutes ago
MountDev AI MCP Connector for WordPress
<= 1.6.5
Broken Access Control vulnerability
6.5
40 minutes ago
SEOPress
<= 10.1
Server Side Request Forgery (SSRF) vulnerability
5.4
43 minutes ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
<= 2.0.17
Broken Access Control vulnerability
5.3
44 minutes ago
Booking and Rental Manager
<= 2.7.7
Cross Site Scripting (XSS) vulnerability
6.5
45 minutes ago
WPKoi Templates for Elementor
<= 3.7.2
Cross Site Scripting (XSS) vulnerability
6.5
46 minutes ago
@aborruso/ckan-mcp-server
< 0.4.112
NPM: CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
6.5
2 hours ago
@aborruso/ckan-mcp-server
< 0.4.112
NPM: CKAN MCP Server: Information disclosure via verbose error reflection
3.7
2 hours ago
Shared Files Pro
< 1.7.70
Unauthenticated Arbitrary File Read vulnerability
7.5
9 hours ago
Simple Ajax Chat
< 20260827
Unauthenticated Stored XSS vulnerability
7.1
10 hours ago
FAQ Builder AYS
1.6.3-1.8.4
Unauthenticated Stored XSS vulnerability
7.1
10 hours ago
Theme My Login
7.0-7.1.15
Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation vulnerability
5.4
10 hours ago
RegistrationMagic
< 6.0.9.9
Unauthenticated Stored XSS vulnerability
7.1
10 hours ago
Rank Math SEO
< 1.0.277
Author+ Robots and Pillar Content Meta Update on Non-Owned Objects vulnerability
2.7
10 hours ago
GamiPress
< 7.9.9.6
Subscriber+ Arbitrary User Points and Achievement Award vulnerability
4.3
10 hours ago
Social Media & Share Icons
< 3.0.1
Reflected XSS vulnerability
7.1
10 hours ago
Photo Gallery by 10Web
< 1.8.44
Reflected XSS vulnerability
7.1
11 hours ago
Backup Guard
3.1.7.9-3.1.23.3
Subscriber+ Privilege Escalation vulnerability
7.1
11 hours ago
Load more