Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
54,976
Mitigations
Mitigation rules
18,238
No official patch
13,653
In triage
937
Published soon
33
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
WP User Manager
<= 2.9.25
Broken Access Control vulnerability
4.3
13 minutes ago
Bus Ticket Booking with Seat Reservation
<= 5.9.7
Broken Access Control vulnerability
5.3
14 minutes ago
Rootblox
<= 1.0.7
Cross Site Scripting (XSS) vulnerability
6.5
16 minutes ago
Booktics
<= 1.0.30
Broken Access Control vulnerability
5.3
16 minutes ago
SureCart
<= 4.9.5
Cross Site Scripting (XSS) vulnerability
6.5
17 minutes ago
VikRentCar
<= 1.4.8
Cross Site Request Forgery (CSRF) vulnerability
8.8
18 minutes ago
Meta Box – WordPress Custom Fields Framework
<= 5.15.2
Broken Access Control vulnerability
6.5
21 minutes ago
Seriously Simple Podcasting
<= 3.17.0
Broken Access Control vulnerability
5.3
34 minutes ago
Seriously Simple Podcasting
<= 3.17.0
Cross Site Scripting (XSS) vulnerability
6.5
34 minutes ago
@angular/router
<= 19.2.25
NPM: @angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)
8.2
50 minutes ago
hono
>= 4.12.4, < 4.13.11
NPM: Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
5.3
50 minutes ago
@angular/platform-server
<= 19.2.25
NPM: @angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
5.1
51 minutes ago
markdown-it
< 14.3.2
NPM: markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes
7.5
52 minutes ago
Brizy
2.8.23
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
DiviGear Carousel
<= 5.2.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
8 hours ago
Document Gallery
4.1-5.1.1
Unauthenticated Document Thumbnail Replacement vulnerability
5.3
8 hours ago
BDM Digital Payment Gateway
1.2.7-1.3.12
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
8 hours ago
Coinbase Commerce Payment Gateway for WooCommerce
<= 1.4.1
Unauthenticated Webhook Signature Bypass vulnerability
5.3
8 hours ago
WP Photo Album Plus
< 9.2.11.002
Reflected XSS vulnerability
7.1
8 hours ago
WP User Manager
2.9-2.9.19
Unauthenticated Account Creation vulnerability
5.3
9 hours ago
Load more