Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
55,110
Mitigations
Mitigation rules
18,278
No official patch
13,658
In triage
933
Published soon
40
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
WooCommerce Cart Abandonment Recovery
< 2.2.0
Unauthenticated Authentication Bypass vulnerability
3.7
28 minutes ago
LatePoint
< 5.7.5
Unauthenticated Payment Bypass vulnerability
5.3
33 minutes ago
Simple Shopping Cart
< 5.3.3
Unauthenticated Payment Bypass vulnerability
5.3
33 minutes ago
CMP – Coming Soon & Maintenance
4.1.19-4.1.20
Unauthenticated Maintenance Mode Bypass vulnerability
5.3
33 minutes ago
Wava Payment
0.3.1-0.3.9
Unauthenticated Merchant Credential Overwrite vulnerability
6.5
34 minutes ago
WholesaleX
< 3.0.9
Unauthenticated Imported User CSV Disclosure vulnerability
5.9
43 minutes ago
Profile Builder
< 4.0.1
Reflected XSS vulnerability
7.1
43 minutes ago
Redirection for Contact Form 7
2.2.7-3.2.11
Unauthenticated Stored XSS vulnerability
7.1
46 minutes ago
WP Booking System
< 2.1.0.3
Reflected XSS vulnerability
7.1
50 minutes ago
@apostrophecms/import-export
< 3.7.0
NPM: ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
7.5
51 minutes ago
apostrophe
< 4.33.0
NPM: ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
7.5
51 minutes ago
WC Ukraine Shipping
< 1.23.4
Subscriber+ Arbitrary Shipping Label Deletion vulnerability
4.3
56 minutes ago
Simple Banner
< 3.3.3
Authenticated Privilege Escalation vulnerability
7.5
1 hour ago
Moloni
< 5.0.14
Subscriber+ Arbitrary Order Invoice Generation vulnerability
6.5
1 hour ago
Ettrick Escape Room Booking
< 1.3.1
Unauthenticated Payment Confirmation Bypass vulnerability
5.3
1 hour ago
Falang multilanguage
< 1.4.6
Subscriber+ Stored XSS vulnerability
6.5
1 hour ago
Synchrony Financing
1.0.5-1.1.1
Unauthenticated Order Takeover vulnerability
6.5
1 hour ago
Click n Chat (Chat Widget Integration)
1.0.4-1.1.2
Unauthenticated SQLi vulnerability
9.3
1 hour ago
Click n Chat (Chat Widget Integration)
< 1.1.3
Unauthenticated SQLi vulnerability
9.3
1 hour ago
WholesaleX
< 3.0.9
Unauthenticated Account Activation and Administrator Approval Bypass vulnerability
6.5
1 hour ago
Load more