Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
51,058
Mitigations
Mitigation rules
16,662
No official patch
13,323
In triage
1,066
Published soon
44
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Really Simple SSL
< 9.5.10.1
Two-Factor OTP Bypass vulnerability
7.5
2 minutes ago
Eupago Gateway For Woocommerce
< 4.7.2
Unauthenticated Arbitrary Refund Initiation vulnerability
5.3
9 minutes ago
wp2epub
<= 0.65
Unauthenticated RCE vulnerability
9
24 minutes ago
DoLeads Integrator
<= 1.2.2
Unauthenticated RCE vulnerability
9
25 minutes ago
User Registration
< 5.2.0
Unauthenticated Paid Membership Bypass vulnerability
5.3
51 minutes ago
Salon booking system
< 10.30.20
Subscriber+ Booking Approval Bypass vulnerability
4.3
52 minutes ago
WebAuthn Provider for Two Factor
< 2.5.6
2FA Bypass vulnerability
7.2
57 minutes ago
WP DSGVO Tools (GDPR)
< 3.1.40
Unauthenticated Sensitive Information Disclosure via Subject Access Request vulnerability
7.5
1 hour ago
WP Support Plus Responsive Ticket System
<= 9.1.2
Unauthenticated Support Ticket Access via Session Cookie Forgery vulnerability
6.5
1 hour ago
FluentForm
< 6.2.1
Subscriber+ Subscription Cancellation via IDOR vulnerability
4.3
1 hour ago
Advanced Form Integration
< 2.1.1
Unauthenticated Privilege Escalation via Breakdance Form Role Mapping vulnerability
8.1
1 hour ago
WP Adminify
< 4.2.10
Contributor+ Sensitive Information Disclosure via Global Search AJAX vulnerability
4.3
1 hour ago
FluentForm
< 6.2.5
Form Manager+ Cross-Form Submission Entry Deletion via IDOR vulnerability
2.7
1 hour ago
Everest Forms
< 3.5.0
Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts vulnerability
5.3
1 hour ago
Product Configurator for WooCommerce
< 1.7.3
Unauthenticated Private/Draft Product Data Disclosure via pc_get_data vulnerability
5.3
1 hour ago
Masteriyo - LMS
< 2.2.1
Unauthenticated Course Progress Disclosure and Deletion vulnerability
6.5
1 hour ago
WS Form LITE
< 1.11.8
Subscriber+ Arbitrary Settings Update vulnerability
4.3
1 hour ago
HUSKY
< 1.4.1
WordPress HUSKY plugin < 1.4.1 - Products Filter Professional for WooCommerce < 1.4.1 - Shop Manager+ Local File Inclusion vulnerability
7.2
3 hours ago
AllCoach
< 1.0.2
Unauthenticated Account Takeover vulnerability
9.8
23 hours ago
Filter & Grids
< 3.11.3
Unauthenticated Private/Draft Post Disclosure vulnerability
5.3
23 hours ago
Load more