Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
54,644
Mitigations
Mitigation rules
18,111
No official patch
13,681
In triage
953
Published soon
42
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
<= 2.34.10
Unauthenticated Arbitrary File Upload vulnerability
9.8
6 hours ago
Tracking Code Manager
<= 2.6.0
Reflected Cross-Site Scripting vulnerability
7.1
6 hours ago
Ocean Extra
<= 2.6.0
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
6 hours ago
Mang Board WP
<= 2.4.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
Groundhogg
<= 4.5.14
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
6 hours ago
Photo Gallery by 10Web
<= 1.8.42
Reflected Cross-Site Scripting vulnerability
7.1
6 hours ago
VK Blocks
<= 1.126.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
7 hours ago
Post and Page Builder by BoldGrid
<= 1.27.13
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
7 hours ago
Import and export users and customers
<= 2.4.5
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.5
7 hours ago
Kirki
<= 6.2.0
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.5
7 hours ago
PhastPress
<= 3.10
Unauthenticated Server-Side Request Forgery vulnerability
5.4
7 hours ago
Asaas Gateway for WooCommerce
< 2.7.8
Unauthenticated Order Payment Bypass vulnerability
5.3
10 hours ago
Trust Payments Gateway for WooCommerce
< 3.1.0
Unauthenticated Order Payment Completion vulnerability
6.5
10 hours ago
Forms
< 3.0.2
Unauthenticated Stored XSS vulnerability
7.1
10 hours ago
affiliate-toolkit
< 3.9.1
Contributor+ RCE vulnerability
7.2
10 hours ago
WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to fix Insecure Content
< 7.8.8.2
Unauthenticated Certificate Private Key and ACME Order Replacement vulnerability
6.5
10 hours ago
WP Booking System
< 2.1.0.1
Unauthenticated Stored XSS vulnerability
7.1
11 hours ago
Contact Form by WPForms
1.10.0.1-2.0.2.1
Unauthenticated Payment Bypass vulnerability
5.3
11 hours ago
Classified Listing
< 6.1.1
Subscriber+ Unattached Media Deletion and Modification vulnerability
5.9
11 hours ago
Rank Math SEO
< 1.0.280
Unauthenticated SEO Analyzer Results Deletion vulnerability
5.3
11 hours ago
Load more