Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
52,844
Mitigations
Mitigation rules
17,266
No official patch
13,364
In triage
1,353
Published soon
62
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
wpForo Forum
3.0.0-3.1.5
Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass vulnerability
5.3
1 hour ago
Link Library
< 7.9.6
Reflected XSS vulnerability
7.1
1 hour ago
Themify Builder
<= 7.8.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
BP Better Messages
<= 3.0.4
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
1 hour ago
Repeater Fields for Elementor Forms
<= 2.2.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Fancy Product Designer
<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Bookly
<= 28.2
Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion vulnerability
6.5
1 hour ago
HT Contact Form 7
<= 2.10.1
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
Bookly
<= 28.2
Unauthenticated Authorization Bypass vulnerability
5.3
1 hour ago
GeoDirectory
<= 2.8.183
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
WP Maps
<= 4.9.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Fancy Product Designer
<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Restaurant Menu by MotoPress
<= 2.4.14
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Fancy Product Designer
<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
AMP for WP
<= 1.1.16
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
WPDM – Premium Packages
<= 7.2.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
JetFormBuilder
<= 3.6.5.3
Reflected Cross-Site Scripting vulnerability
7.1
1 hour ago
BA Book Everything
<= 1.8.27
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Modula Image Gallery
<= 3.0.2
Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) vulnerability
8.1
1 hour ago
wpForo Forum
<= 3.1.6
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Load more