Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
54,826
Mitigations
Mitigation rules
18,197
No official patch
13,667
In triage
928
Published soon
21
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
WP Event Solution
<= 4.1.26
Broken Access Control vulnerability
5.3
3 minutes ago
MapSVG
<= 8.16.1
Cross Site Scripting (XSS) vulnerability
6.5
4 minutes ago
MapSVG
<= 8.16.1
SQL Injection vulnerability
8.5
4 minutes ago
MapSVG
<= 8.16.1
Sensitive Data Exposure vulnerability
5.3
5 minutes ago
Squeeze
< 1.8.1
Subscriber+ Missing Authorization vulnerability
5.4
1 hour ago
MAIO – The new AI GEO / SEO tool
< 7.3.22
Unauthenticated Crawl Analytics Disclosure vulnerability
5.3
1 hour ago
GoSMTP Pro
<= 1.2.3
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Tourfic
<= 3.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
GeoDirectory
<= 2.8.191
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
ProfilePress
<= 4.17.5
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
4 hours ago
SureCart
<= 4.9.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Tutor LMS
<= 4.1.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
User Registration & Membership Pro
<= 6.2.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Vulnity Security
<= 1.4.3
Unauthenticated Authentication Bypass to Administrator vulnerability
8.1
4 hours ago
WP Sessions Time Monitoring Full Automatic
<= 1.1.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Events Made Easy
<= 3.2.22
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
SureDash
<= 1.12.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
Social Share Buttons
<= 1.30
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
Mobile builder
<= 1.4.2
Unauthenticated SQLi vulnerability
6.8
4 hours ago
DoubleScale CRM | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More
<= 1.5.1
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
4 hours ago
Load more