Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,511
Mitigations
Mitigation rules
19,139
No official patch
13,632
In triage
1,113
Published soon
11
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
JetFormBuilder
<= 3.6.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
45 minutes ago
JetFormBuilder
<= 3.6.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
45 minutes ago
JetFormBuilder
<= 3.6.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
46 minutes ago
WP ImageViewer
<= 3.0.2
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
46 minutes ago
AnyWhere Elementor
<= 1.3.0
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
47 minutes ago
Happyforms Pro
<= 1.38.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
57 minutes ago
Happyforms Pro
<= 1.38.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
57 minutes ago
Link Library
<= 7.10.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
GamiPress
<= 8.1.1
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
1 hour ago
Image Hover Effects Ultimate
<= 9.12.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Church Admin
<= 5.1.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
wpForo Forum
<= 3.2.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
WP Data Access
<= 5.5.89
Incorrect Authorization to Unauthenticated Privilege Escalation vulnerability
9.8
1 hour ago
WS Form LITE
<= 1.12.18
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
WPJAM Basic
<= 7.1
Unauthenticated Privilege Escalation to 'data[args][role]' Parameter vulnerability
9.8
1 hour ago
Real Testimonials
<= 4.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Advanced Form Integration
<= 2.10.2
Unauthenticated PHP Object Injection vulnerability
9.8
1 hour ago
TranslatePress
<= 3.3.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
QA Analytics
<= 5.3.0
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
9.8
1 hour ago
WP Data Access
<= 5.5.89
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Load more