Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
54,275
Mitigations
Mitigation rules
17,901
No official patch
13,607
In triage
970
Published soon
106
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
GamiPress
<= 7.9.4
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
21 minutes ago
Groundhogg
<= 4.8.3
Unauthenticated Privilege Escalation to Support User Identity Confusion vulnerability
8.1
30 minutes ago
Groundhogg
<= 4.9
Authenticated (Custom+) Privilege Escalation to 'user' Parameter vulnerability
8.8
32 minutes ago
JetFormBuilder
<= 3.6.6
Reflected DOM-Based Cross-Site Scripting vulnerability
7.1
35 minutes ago
FluentForm
<= 6.2.5
Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification vulnerability
5.4
36 minutes ago
Download Manager
<= 3.3.57
Unauthenticated DOM-Based Reflected Cross-Site Scripting vulnerability
7.1
36 minutes ago
Frontend Admin by DynamiApps
<= 3.28.36
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
37 minutes ago
Graphene
<= 2.9.4
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
37 minutes ago
Real Estate Manager
<= 7.3
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
38 minutes ago
Church Admin
<= 5.1.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
38 minutes ago
Easy Digital Downloads
<= 3.6.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
39 minutes ago
FooSales
<= 1.43.0
Authenticated (Custom+) Privilege Escalation vulnerability
8.8
39 minutes ago
GeoDirectory
<= 2.8.187
Unauthenticated Local File Inclusion vulnerability
8.1
39 minutes ago
HivePress
<= 1.7.31
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
40 minutes ago
FV Player 8
<= 8.1.7
Authenticated (Subscriber+) Arbitrary File Upload vulnerability
8.8
40 minutes ago
Team
<= 6.0.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
5.9
44 minutes ago
SpeedyCache
<= 1.4.2
Unauthenticated Sensitive Information Exposure vulnerability
3.7
46 minutes ago
SiteOrigin Widgets Bundle
<= 1.74.3
Authenticated (Contributor+) Arbitrary File Read vulnerability
6.5
46 minutes ago
Spam protection, AntiSpam, FireWall by CleanTalk
<= 6.88
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
54 minutes ago
Responsive Lightbox
<= 2.7.9
Authenticated (Editor+) Stored Cross-Site Scripting vulnerability
4.4
54 minutes ago
Load more