Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
57,210
Mitigations
Mitigation rules
19,341
No official patch
13,671
In triage
1,047
Published soon
45
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Cloud Storage Manager for Fluent Forms – Google Drive, Dropbox, OneDrive, S3 Uploads
<= 1.2.0
Unauthenticated Arbitrary File Write vulnerability
10
2 hours ago
memberdash
<= 1.8.7
Authenticated (Subscriber+) Privilege Escalation to Administrator vulnerability
8.8
9 hours ago
WP Ultimate CSV Importer Pro
< 9.0.7
Unauthenticated Post Data Disclosure vulnerability
3.7
9 hours ago
FooBox Image Lightbox
<= 2.8.7
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
9 hours ago
Multi Step for Contact Form
<= 2.9.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Lightbox with PhotoSwipe
< 5.19.0
Unauthenticated Stored XSS vulnerability
7.1
9 hours ago
Checkout Files Upload for WooCommerce
< 2.4.1
Unauthenticated Stored XSS vulnerability
7.1
9 hours ago
Swipe
<= 1.4
Unauthenticated Authentication Bypass vulnerability
8.1
9 hours ago
Shipo
1.6-1.8.0
Authentication Bypass to Administrator vulnerability
9.8
9 hours ago
BuddyForms
<= 2.10.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
FV Player 8
<= 8.1.9
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
9 hours ago
Quick Page/Post Redirect
5.2.1-5.2.3
Backdoor vulnerability
10
9 hours ago
WP Ultimate CSV Importer
< 9.2
Unauthenticated Post Data Disclosure vulnerability
3.7
9 hours ago
Chargely Free Subscriptions For Woocommernce
<= 1.0
Unauthenticated WooCommerce REST API Credential Disclosure vulnerability
7.5
9 hours ago
Email Marketing 4Dem
<= 2.0.5
Unauthenticated Settings Modification and Configuration Disclosure vulnerability
6.5
9 hours ago
Email Marketing 4Dem
<= 2.0.5
Unauthenticated Configuration Destruction and Arbitrary Plugin Record Deletion vulnerability
6.5
9 hours ago
WP Ultimate CSV Importer
< 9.3
Admin+ SQLi vulnerability
4.9
11 hours ago
SEOJuice
< 2.12.0
Administrator Account Creation vulnerability
8.8
11 hours ago
Duplicate Post
< 1.5.8
Authenticated Post Publishing Restriction Bypass vulnerability
5.3
11 hours ago
Duplicate Post
< 1.5.8
Authenticated Arbitrary Post Slug Takeover vulnerability
5.3
11 hours ago
Load more