Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,453
Mitigations
Mitigation rules
19,100
No official patch
13,631
In triage
1,121
Published soon
10
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Redux Framework
<= 4.5.16
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
56 minutes ago
SliceWP
<= 1.2.14
Unauthenticated SQL Injection vulnerability
9.3
57 minutes ago
TranslatePress
<= 3.3.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
57 minutes ago
Soledad
<= 8.7.7
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
57 minutes ago
Tutor LMS
<= 4.1.2
Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
6.5
1 hour ago
Optimole
<= 4.2.17
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
LifterLMS
<= 10.3.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
WPBakery Page Builder
<= 9.0.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Greenshift
<= 13.2.2
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
JupiterX Core
<= 4.62.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Printcart Web to Print Product Designer for WooCommerce
<= 2.13.2
Unauthenticated Arbitrary File Upload vulnerability
10
1 hour ago
Active Products Tables for WooCommerce
<= 2.1.5
Unauthenticated File Deletion vulnerability
6.5
1 hour ago
Pie Register
<= 3.8.4.16
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
QODE Wishlist for WooCommerce
<= 1.2.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Optimole
<= 4.2.18
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
GeoDirectory
<= 2.8.200
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
FV Flowplayer Video Player
<= 7.5.56.7212
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
LearnPress & Course Review
<= 4.2.2
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
1 hour ago
Payever - WooCommerce Gateway
<= 4.8.0
Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability
10
1 hour ago
iubenda
<= 3.13.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Load more