Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,294
Mitigations
Mitigation rules
19,013
No official patch
13,622
In triage
1,027
Published soon
11
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Form Maker by 10Web
< 1.15.51
Unauthenticated Stored XSS vulnerability
7.1
16 minutes ago
GTM Server Side
< 2.3.11
Unauthenticated SSRF and Same-Origin XSS vulnerability
7.1
20 minutes ago
Essential Real Estate
4.4.3-5.3.4
Subscriber+ Arbitrary Media Attachment Deletion vulnerability
6.5
25 minutes ago
Booking Package
< 1.7.34
Unauthenticated Payment Bypass vulnerability
5.3
29 minutes ago
Duplicator Pro
< 5.1.0
Reflected XSS vulnerability
7.1
30 minutes ago
Duplicator
< 5.1.0
Reflected XSS vulnerability
7.1
30 minutes ago
Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance
<= 1.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
50 minutes ago
Slim Jetpack
<= 2.7.0.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Mobile builder
<= 1.4.2
Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters vulnerability
8.8
1 hour ago
Import and export users and customers
<= 2.5.11
Authenticated (Custom+) Privilege Escalation vulnerability
8.8
1 hour ago
Simple Download Monitor
< 4.1.3
Contributor+ Private Download Item Title and Description Disclosure vulnerability
4.3
1 hour ago
EventPrime
< 4.3.6.1
Unauthenticated Pending Post Disclosure vulnerability
5.3
1 hour ago
WPDM – Premium Packages
< 7.3.1
Subscriber+ Guest Order Takeover vulnerability
5.4
1 hour ago
VikWidgetsLoader
< 1.12.3
Contributor+ Stored XSS vulnerability
6.5
1 hour ago
All-in-One Video Gallery
< 5.0.0
Contributor+ Stored XSS vulnerability
6.5
1 hour ago
WPDM – Premium Packages
< 7.3.1
Unauthenticated Cross-User Saved Cart Disclosure vulnerability
5.3
1 hour ago
WPDM – Premium Packages
< 7.3.1
Unauthenticated Guest Order Status Disclosure vulnerability
3.7
1 hour ago
WPvivid Backup and Migration
< 0.9.138
Admin+ Path Traversal vulnerability
5.5
1 hour ago
Duplicator Pro
< 5.1.0
Subscriber+ SQLi vulnerability
4.8
1 hour ago
Duplicator
< 5.1.0
Subscriber+ SQLi vulnerability
4.8
1 hour ago
Load more