Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
53,658
Mitigations
Mitigation rules
17,699
No official patch
13,473
In triage
1,070
Published soon
143
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
ACPT (Pro) - Custom Post Types Plugin for WordPress
<= 2.0.66
Authenticated (Subscriber+) Remote Code Execution vulnerability
8.8
3 hours ago
Post SMTP
<= 4.0.1
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
3 hours ago
@orpc/zod
< 1.14.10
NPM: @orpc/zod: Prototype injection in smart coercion
6.5
4 hours ago
Image Slider Widget
<= 1.1.130
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago
File Uploads Addon for WooCommerce
1.7.2-1.7.6
Unauthenticated Direct File Access vulnerability
5.9
7 hours ago
File Uploads Addon for WooCommerce
1.7.2-1.7.5
Unauthenticated Customer Uploaded File Disclosure vulnerability
5.9
7 hours ago
Kit (formerly ConvertKit) for WooCommerce
<= 2.2.0
Broken Access Control vulnerability
5.3
7 hours ago
Polylang
<= 3.8.7
Sensitive Data Exposure vulnerability
4.3
10 hours ago
WP Event Solution
<= 4.1.25
Broken Access Control vulnerability
5.3
10 hours ago
WP Event Solution
<= 4.1.25
Sensitive Data Exposure vulnerability
5.3
10 hours ago
Fluent Forms Pro Add On Pack
<= 6.2.13
Broken Access Control vulnerability
5.3
10 hours ago
WP Dummy Content Generator
<= 4.0.0
Broken Access Control vulnerability
4.3
11 hours ago
Starter Templates
<= 4.7.7
Broken Access Control vulnerability
5.4
12 hours ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
<= 2.0.22
Broken Access Control vulnerability
6.5
12 hours ago
Taxi Booking Manager for WooCommerce
<= 2.1.1
Other vulnerability Type vulnerability
5.3
12 hours ago
Sirv
<= 8.2.5
SQL Injection vulnerability
8.5
12 hours ago
PowerPress Podcasting
<= 11.17.9
Sensitive Data Exposure vulnerability
5.3
12 hours ago
Starter Templates
<= 4.7.7
Cross Site Scripting (XSS) vulnerability
6.5
12 hours ago
JS Help Desk
<= 4.0.0
Insecure Direct Object References (IDOR) vulnerability
5.4
12 hours ago
Name Directory
<= 1.34.2
Cross Site Scripting (XSS) vulnerability
6.5
12 hours ago
Load more