Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
57,224
Mitigations
Mitigation rules
19,346
No official patch
13,672
In triage
1,082
Published soon
0
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Give - Peer-to-Peer
<= 2.9.5
WordPress Give - Peer-to-Peer plugin <= 2.9.5 - Authorization Bypass to Team Modification and Media Upload vulnerability
7.5
11 hours ago
Give - Peer-to-Peer
<= 2.9.3
WordPress Give - Peer-to-Peer plugin <= 2.9.3 - Unauthenticated SQL Injection vulnerability
9.3
11 hours ago
Lazy Blocks
< 3.0.0
Unauthenticated RCE vulnerability
10
11 hours ago
RegistrationMagic
< 6.1.0.4
Reflected XSS vulnerability
7.1
11 hours ago
Auth Armor
<= 1.0.3
Unauthenticated Account Takeover vulnerability
9.8
11 hours ago
A2Reviews
<= 1.2.3
Unauthenticated Plugin Data Modification and Disclosure vulnerability
6.5
12 hours ago
Payment Gateway via Valitor for WooCommerce
< 1.9.41
Unauthenticated Payment Bypass vulnerability
5.3
12 hours ago
Burst Statistics
< 3.7.5
Unauthenticated Draft and Private Post Title Disclosure vulnerability
3.7
14 hours ago
Burst Statistics
< 3.7.5
Unauthenticated Analytics Disclosure Beyond Shared Report Date Range vulnerability
5.3
14 hours ago
WPGraphQL
< 2.27.1
Contributor+ Custom Post Status Content Disclosure vulnerability
3.1
14 hours ago
Restrict Content
3.2.17-4.0.5
Subscriber+ Stripe Client Secret Disclosure and Payment Method Manipulation vulnerability
5.4
14 hours ago
Restrict Content
< 4.0.6
Unauthenticated Table Collation Downgrade vulnerability
5.3
14 hours ago
RegistrationMagic
5.2.3.1-6.1.0.3
Unauthenticated Non-Admin User Profile Modification vulnerability
5.3
14 hours ago
RegistrationMagic
< 6.1.0.4
Admin+ SQLi vulnerability
4.1
14 hours ago
Cloud Storage Manager for Fluent Forms – Google Drive, Dropbox, OneDrive, S3 Uploads
<= 1.2.0
Unauthenticated Arbitrary File Write vulnerability
10
1 day ago
memberdash
<= 1.8.7
Authenticated (Subscriber+) Privilege Escalation to Administrator vulnerability
8.8
1 day ago
WP Ultimate CSV Importer Pro
< 9.0.7
Unauthenticated Post Data Disclosure vulnerability
3.7
1 day ago
FooBox Image Lightbox
<= 2.8.7
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 day ago
Multi Step for Contact Form
<= 2.9.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
Lightbox with PhotoSwipe
< 5.19.0
Unauthenticated Stored XSS vulnerability
7.1
1 day ago
Load more