Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,047
Mitigations
Mitigation rules
18,924
No official patch
13,643
In triage
957
Published soon
39
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
APIExperts Square for WooCommerce
<= 4.7.5
Cross Site Request Forgery (CSRF) vulnerability
5.4
1 hour ago
AI Engine
<= 3.8.8
Cross Site Request Forgery (CSRF) vulnerability
8.8
1 hour ago
Event Tickets
<= 5.30.2
Broken Access Control vulnerability
4.3
1 hour ago
Media Player Addons for Elementor – Media Player widget for WP
<= 1.1.10
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
The Events Calendar
<= 6.18.2
Broken Access Control vulnerability
5.4
1 hour ago
Easy Digital Downloads
<= 3.7.2
Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability
8.1
1 hour ago
Essential Addons for Elementor
<= 6.8.7
Unauthenticated Privilege Escalation to 'page_id' Parameter vulnerability
7.4
2 hours ago
Fluent CRM
<= 3.2.6
Broken Access Control vulnerability
5.4
2 hours ago
The Events Calendar
<= 6.18.2
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
JetFormBuilder
<= 3.6.7.1
Content Injection vulnerability
5.3
2 hours ago
Webba Booking
<= 6.5.4
Broken Access Control vulnerability
5.4
2 hours ago
Redux Framework
<= 4.5.15
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Email Customizer for WooCommerce (Pro)
<= 3.9.5
Authenticated (Subscriber+) Remote Code Execution vulnerability
8.8
2 hours ago
The Events Calendar
<= 6.18.2
Broken Access Control vulnerability
5.3
2 hours ago
JetFormBuilder
<= 3.6.7.1
Broken Access Control vulnerability
5.3
2 hours ago
Modern Events Calendar Lite
< 7.36.4
Subscriber+ Arbitrary Post Modification vulnerability
6.5
2 hours ago
Desktop Mode
<= 1.1.16
Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure vulnerability
4.3
2 hours ago
@nx/gradle
>= 21.0.0, < 22.7.9
npm: @nx/maven and @nx/gradle have OS command injection via nx.json plugin options
7.3
2 hours ago
@nx/maven
>= 22.0.2, < 22.7.9
npm: @nx/maven and @nx/gradle have OS command injection via nx.json plugin options
7.3
2 hours ago
Timetics
<= 1.0.65
Broken Access Control vulnerability
5.3
2 hours ago
Load more