Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
50,169
Mitigations
Mitigation rules
16,181
No official patch
13,189
In triage
1,135
Published soon
8
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
VikBooking Hotel Booking Engine & PMS
<= 1.8.13
Reflected Cross-Site Scripting vulnerability
7.1
2 hours ago
WPify Woo Czech
<= 5.4.16
Authenticated (Shop Manager+) Privilege Escalation vulnerability
7.2
2 hours ago
Checkout Field Editor for WooCommerce (Pro)
<= 3.7.7
Authenticated (Subscriber+) Path Traversal to Arbitrary File Read vulnerability
6.5
2 hours ago
Nexter Blocks
<= 5.0.0
Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion vulnerability
4.3
2 hours ago
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart
<= 2.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
VikBooking Hotel Booking Engine & PMS
<= 1.8.13
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Paid Memberships Pro
<= 3.8.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Tablesome
< 1.1.31
Unauthenticated Post Creation and Modification vulnerability
6.5
3 hours ago
Contact Form Entries
< 1.5.3
Reflected XSS vulnerability
7.1
3 hours ago
Quiz And Survey Master
< 11.1.3
Unauthenticated User Enumeration and Password Oracle vulnerability
5.3
3 hours ago
Bookly
< 27.8
Unauthenticated SQL Injection vulnerability
9.3
3 hours ago
Hotel Booking Lite
< 6.0.4
Subscriber+ Sensitive Data Disclosure vulnerability
7.5
3 hours ago
Remote API
<= 0.2
Unauthenticated PHP Object Injection vulnerability
9.8
3 hours ago
Ultimate Addons for WPBakery Page Builder
< 3.21.4
Unauthenticated Custom Icon Font Deletion vulnerability
6.5
3 hours ago
Booking Calendar Contact Form
<= 1.0.23
Shortcode SQL Injection vulnerability
9.3
4 hours ago
Booking Calendar Contact Form
< 1.0.24
Blind SQL Injection vulnerability
9.3
6 hours ago
Single Personal Message
<= 1.0.3
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
6 hours ago
Photocart Link
<= 1.6
Unauthenticated Local File Inclusion vulnerability
8.1
6 hours ago
Apptha Slider Gallery
<= 1.0
Unauthenticated SQL Injection vulnerability
9.3
6 hours ago
Backup Migration
<= 1.2.8
Sensitive Information Exposure vulnerability
7.5
6 hours ago
Load more