Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
50,975
Mitigations
Mitigation rules
16,613
No official patch
13,324
In triage
1,051
Published soon
7
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Magazine Blocks
<= 1.8.6
Cross Site Scripting (XSS) vulnerability
6.5
7 minutes ago
RepairBuddy
<= 4.1223
Broken Access Control vulnerability
5.3
7 minutes ago
Hash Form
<= 1.4.0
Cross Site Request Forgery (CSRF) vulnerability
4.3
12 minutes ago
Fluent Support Pro
<= 2.3.1
Cross Site Request Forgery (CSRF) vulnerability
5.4
13 minutes ago
Fluent Boards Pro
<= 2.0.11
Insecure Direct Object References (IDOR) vulnerability
5.3
13 minutes ago
FluentCRM Pro
<= 3.1.12
Server Side Request Forgery (SSRF) vulnerability
4.9
14 minutes ago
Fluent Support Pro
<= 2.3.1
Broken Access Control vulnerability
5.4
20 minutes ago
FluentCRM Pro
<= 3.1.12
SQL Injection vulnerability
7.6
21 minutes ago
Shared Files
<= 1.7.69
Server Side Request Forgery (SSRF) vulnerability
6.4
22 minutes ago
Booking and Rental Manager
<= 2.7.5
Broken Access Control vulnerability
5.3
30 minutes ago
Templately
< 3.7.1
Unauthenticated Administrator Templately Cloud Connection Overwrite vulnerability
6.5
2 hours ago
Kirki
< 6.2.1
Unauthenticated Arbitrary Shortcode Execution via Form Email Actions vulnerability
6.5
2 hours ago
TeraWallet – For WooCommerce
< 1.6.10
WordPress TeraWallet - Wallet for WooCommerce plugin < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up vulnerability
4.3
3 hours ago
EONSR AEO Agent
<= 3.7.9
Unauthenticated Stored XSS via Scheduled Post Creation vulnerability
7.1
3 hours ago
Infility Global
<= 2.15.34
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
Chat On Desk Order Notifications
< 1.0.9
Unauthenticated Account Takeover vulnerability
8.1
3 hours ago
SMS Alert Order Notifications
< 3.9.8
Unauthenticated Account Takeover vulnerability
9.8
3 hours ago
jsonata
< 1.8.8
NPM: JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
9.3
2 days ago
jsonata
< 1.8.8
NPM: JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
9.3
2 days ago
jsonata
<= 1.8.7
NPM: JSONata: Arbitrary Code Execution via crafted JSONata expressions
9.3
2 days ago
Load more