Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
52,913
Mitigations
Mitigation rules
17,282
No official patch
13,373
In triage
1,371
Published soon
18
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
WP Verify API
<= 1.0.0
Unauthenticated Verification Code Email Sending to Arbitrary Recipients vulnerability
5.3
4 hours ago
PowerPress Podcasting
< 11.17.2
Contributor+ Stored XSS vulnerability
6.5
1 day ago
WP YouTube Lyte
< 1.7.31
Contributor+ Stored XSS vulnerability
6.5
1 day ago
Optima Express + MarketBoost IDX Plugin
8.6.0-8.7.5
Author+ Stored XSS vulnerability
6.5
1 day ago
NextScripts
< 4.4.8
Authenticated Social Account Credential Disclosure and Data Deletion vulnerability
5.9
1 day ago
WPeMatico RSS Feed Fetcher
< 2.8.27
Contributor+ Stored XSS vulnerability
6.5
1 day ago
WPeMatico RSS Feed Fetcher
< 2.8.27
Contributor+ SSRF vulnerability
4.1
1 day ago
MailChimp For WooCommerce
< 6.3
Unauthenticated Customer Email and Cart Disclosure vulnerability
5.3
1 day ago
WPeMatico RSS Feed Fetcher
< 2.8.27
Contributor+ SSRF vulnerability
4.1
1 day ago
Bookly
< 28.3
Staff+ Appointment and Payment Disclosure, Modification and Deletion vulnerability
3.8
1 day ago
Bookly
23.2-28.2
Bookly Administrator+ PHP Object Injection vulnerability
4.7
1 day ago
EmbedPress
< 4.6.7
Contributor+ Stored XSS vulnerability
6.5
1 day ago
WebFacing Email Accounts for cPanel
5.3-5.3.6
Unauthenticated LFI vulnerability
5.3
1 day ago
UpdraftPlus
1.23.8-1.26.7
Subscriber+ Remote Storage Credential Disclosure vulnerability
5.3
1 day ago
UpdraftPlus
2.23.8-2.26.8.25
Subscriber+ Remote Storage Credential Disclosure vulnerability
5.3
1 day ago
Optimole
4.0.0-4.2.12
Author+ Stored XSS vulnerability
5.9
2 days ago
WP Delicious
< 1.10.8
Contributor+ Stored XSS vulnerability
6.5
2 days ago
MCP Server for WordPress
< 1.8.2
CSRF to Administrator Account Creation vulnerability
8.8
2 days ago
MCP Server for WordPress
< 1.8.2
Contributor+ Arbitrary Post Title Disclosure vulnerability
2.7
2 days ago
MCP Server for WordPress
< 1.8.2
Contributor+ Workflow Modification and Deletion vulnerability
2.7
2 days ago
Load more