Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
52,243
Mitigations
Mitigation rules
17,058
No official patch
13,347
In triage
1,278
Published soon
4
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Easy Invoice
<= 2.3.8
Broken Access Control vulnerability
5.3
1 hour ago
Cooked
<= 1.16.0
Insecure Direct Object References (IDOR) vulnerability
5.4
1 hour ago
Simple Membership
<= 4.8.2
Broken Access Control vulnerability
5.3
1 hour ago
Booking Calendar
<= 11.7
Broken Access Control vulnerability
5.3
1 hour ago
PublishPress Series
<= 3.1.3
Cross Site Request Forgery (CSRF) vulnerability
5.4
1 hour ago
Geo Mashup
<= 1.13.21
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Xagio SEO
<= 7.1.0.43
Cross Site Request Forgery (CSRF) vulnerability
8.8
1 hour ago
WPFunnels
<= 3.12.13
Insecure Direct Object References (IDOR) vulnerability
5.3
1 hour ago
BerqWP
<= 4.1.15
Broken Access Control vulnerability
5.3
1 hour ago
Multi Uploader for Gravity Forms
<= 1.1.9
Unauthenticated Arbitrary File Upload vulnerability
10
1 hour ago
Paid Downloads
<= 3.15
Unauthenticated Arbitrary File Upload vulnerability
10
1 hour ago
GiveWP
4.16.6-4.16.8.0
Unauthenticated Account Takeover vulnerability
8.1
1 hour ago
Ni WooCommerce Sales Report
< 4.2.0
Unauthenticated SQLi vulnerability
9.3
1 hour ago
Tutor LMS
< 4.0.8
Read-Only API Key Privilege Escalation vulnerability
7.2
2 hours ago
ProfilePress
<= 4.17.1
WordPress Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content - ProfilePress plugin <= 4.17.1 - Unauthenticated Arbitrary Plugin Installation via Brute Force vulnerability
8.1
2 hours ago
WP Import Export Lite
< 3.9.33
Authenticated Arbitrary Directory Deletion vulnerability
6.5
2 hours ago
WP Import Export Lite
< 3.9.33
Authenticated Arbitrary File Upload vulnerability
9.1
2 hours ago
WP Import Export Lite
< 3.9.33
Authenticated RCE vulnerability
7.2
2 hours ago
WP Import Export Lite
< 3.9.34
Authenticated RCE vulnerability
7.2
2 hours ago
WP Event Solution
< 4.1.24
Contributor+ User Creation vulnerability
2.7
2 hours ago
Load more