Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
52,072
Mitigations
Mitigation rules
17,011
No official patch
13,354
In triage
1,236
Published soon
5
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
bbPress
<= 2.6.14
Sensitive Data Exposure vulnerability
5.3
11/09/2026
WP-Members
<= 3.5.6
Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago
Registration Form for WooCommerce
1.1.0-1.1.2
Contributor+ Privilege Escalation vulnerability
8.8
3 hours ago
Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons
< 3.3.3
Unauthenticated Stored XSS vulnerability
7.1
3 hours ago
Advanced Customized Prompts
<= 1.0.1
Subscriber+ Stored XSS vulnerability
6.5
3 hours ago
MultiVendorX
5.0.0-5.0.15
Store Owner+ Privilege Escalation to Administrator vulnerability
7.2
3 hours ago
Visualizer
< 4.0.6
Contributor+ Arbitrary Chart Deletion vulnerability
5.4
3 hours ago
WPCafe
3.0.10-3.0.17
Unauthenticated Order Disclosure and Modification vulnerability
6.5
3 hours ago
المنتور فارسی
2.7.10-2.8.1
Unauthenticated ZarinPal Payment Callback Authority Bypass vulnerability
5.3
3 hours ago
miniOrange's Google Authenticator
18.0-19.2
Unauthenticated Arbitrary Option Deletion vulnerability
9.3
3 hours ago
miniOrange's Google Authenticator
5.3.24-6.3.0
Unauthenticated Arbitrary Option Deletion vulnerability
9.3
3 hours ago
Teddy Bear Customize Addon
<= 1.0.5
Unauthenticated Arbitrary File Upload vulnerability
10
3 hours ago
Teddy Bear Customize Addon
<= 1.0.5
Unauthenticated Account Takeover vulnerability
9.8
3 hours ago
Advanced Customized Prompts
<= 1.0.1
Unauthenticated Account Takeover vulnerability
9.8
3 hours ago
miniOrange's Google Authenticator
18.0-19.2
2FA Bypass vulnerability
7.5
3 hours ago
miniOrange's Google Authenticator
6.2.8-6.3.0
2FA Bypass vulnerability
7.5
3 hours ago
Metform
< 4.1.9
Unauthenticated Email Header Injection vulnerability
4.8
6 hours ago
Payment Gateway PayPay for WooCommerce
0.5-0.9.3
Unauthenticated Payment Bypass vulnerability
3.7
6 hours ago
Nexi XPay Build
7.6.1-7.6.2
Unauthenticated Saved Payment Token Disclosure vulnerability
5.3
6 hours ago
Kirki
<= 6.2.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
7 hours ago
Load more