Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
54,633
Mitigations
Mitigation rules
18,095
No official patch
13,686
In triage
943
Published soon
57
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Meow Lightbox
<= 5.6.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Responsive Blocks
< 2.3.0
Unauthenticated HTML Injection in Form Notification Email vulnerability
5.4
1 hour ago
Tickera
< 3.6.0.4
Unauthenticated Order Payment Bypass vulnerability
5.3
1 hour ago
LifterLMS
<= 10.3.1
Authenticated (Contributor+) Local File Inclusion vulnerability
7.5
1 hour ago
GeoDirectory
<= 2.8.190
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Record of Consent Extension for Complianz
<= 2.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
Jeg Kit for Elementor
<= 3.2.19
Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
6.5
3 hours ago
GeoDirectory
<= 2.8.190
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
Mang Board WP
<= 2.4.3
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
NewStatPress
<= 1.4.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
Contact Form DB for Enfold
<= 2.0.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
Verified Reviews (Avis Vérifiés)
<= 2.4.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
FV Player 8
<= 8.1.7
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
NewStatPress
<= 1.4.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
LatePoint
<= 5.7.3
Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability
7.5
3 hours ago
Form Maker by 10Web
<= 1.15.48
Unauthenticated SQL Injection vulnerability
7.5
3 hours ago
JTL-Connector for WooCommerce
<= 2.4.3
Unauthenticated SQL Injection vulnerability
9.3
3 hours ago
Mang Board WP
<= 2.4.3
Unauthenticated Local File Inclusion vulnerability
8.1
4 hours ago
FormFlow
<= 3.10.0
Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment vulnerability
9.8
4 hours ago
ShopMagic
<= 4.9.0
Unauthenticated Local File Inclusion vulnerability
8.1
4 hours ago
Load more