Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
50,141
Mitigations
Mitigation rules
16,140
No official patch
13,202
In triage
1,147
Published soon
8
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Simply Poll
<= 1.4.1
Unauthenticated SQL Injection vulnerability
9.3
3 hours ago
UsersWP
< 1.2.67
Two-Factor Authentication Bypass vulnerability
7.1
3 hours ago
Meta Box AIO
<= 3.8.0
Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability
9.1
4 hours ago
WP Fast Total Search
<= 1.80.280
Unauthenticated SQL Injection vulnerability
9.3
4 hours ago
Plugin Organizer
<= 10.2.4
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
4 hours ago
Fluent Forms Pro Add On Pack
<= 6.2.6
Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change vulnerability
8.8
4 hours ago
WPDM – Premium Packages
<= 6.2.0
Unauthenticated SQL Injection vulnerability
9.3
5 hours ago
TrueBooker
<= 1.2.2
Unauthenticated SQL Injection vulnerability
9.3
5 hours ago
Taskbuilder
<= 5.0.9
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
5 hours ago
Web Directory Free
<= 1.7.13
Unauthenticated SQL Injection vulnerability
9.3
5 hours ago
Demi – One Click Demo Import, Backup & Site Migration
<= 0.0.7
Unauthenticated Arbitrary Directory Deletion vulnerability
7.5
5 hours ago
ProfileGrid
< 5.9.9.8
Unauthenticated Privilege Escalation vulnerability
9.8
5 hours ago
Customer Switching
< 2.1.3
Customer+ Privilege Escalation to Administrator vulnerability
8.8
5 hours ago
@aws-amplify/codegen-ui-react
<= 2.20.2
NPM: AWS Amplify Studio UI Component Properties Has an Input Validation Issue
9.5
16 hours ago
MailerPress
<= 1.5.0
Missing Authorization to Unauthenticated Contact Updates vulnerability
5.3
16 hours ago
dssrf
<= 1.0.3
NPM: dssrf has an SSRF bypass with remove_at_symbol_in_string
8.7
20 hours ago
Uncanny Automator
<= 7.3.2
Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure vulnerability
7.5
1 day ago
Bookly
<= 27.5
Unauthenticated SQL Injection vulnerability
9.3
1 day ago
Chaty Pro
<= 3.5.5
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
1 day ago
Question Answer
<= 1.2.73
Unauthenticated SQL Injection vulnerability
9.3
1 day ago
Load more