Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
51,974
Mitigations
Mitigation rules
16,980
No official patch
13,351
In triage
1,219
Published soon
12
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Booktics
<= 1.0.23
WordPress Booktics - Booking Calendar for Appointments and Service Businesses plugin <= 1.0.23 - Missing Authorization vulnerability
5.3
7 minutes ago
Bold Timeline Lite
<= 1.2.8
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
6.5
18 minutes ago
Insert or Embed Articulate Content into WordPress
< 4.3000000025
Author+ Upload to RCE vulnerability
9.1
1 hour ago
Text Snippets
<= 0.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Posts map
<= 0.1.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
WPMK Block
<= 1.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Quran Live Multilanguage
<= 1.0.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
ER Swiffy Insert
<= 1.0.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Slider Bootstrap Carousel
<= 1.0.7
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Easy Social Photos Gallery – MIF
<= 3.1.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Switch CTA Box
<= 1.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
Bread & Butter
< 8.7.0.139
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Twittee Text Tweet
<= 1.0.8
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
AcyMailing SMTP Newsletter
<= 11.0.4
WordPress AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter vulnerability
7.5
1 hour ago
Post Grid and Gutenberg Blocks
2.3.0-2.3.8
Arbitrary Code Execution vulnerability
9.8
2 hours ago
Sidebar Manager Light
<= 1.18
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
Redux Framework
<= 4.5.13.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
Contact Form 7 Captcha
0.1.7-0.1.8
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
4 hours ago
WP Express Checkout (Accept PayPal Payments)
< 2.5.0
Unauthenticated Payment Bypass vulnerability
5.3
7 hours ago
Spam protection, AntiSpam, FireWall by CleanTalk
< 6.87
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
7 hours ago
Load more