Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
55,110
Mitigations
Mitigation rules
18,278
No official patch
13,656
In triage
933
Published soon
40
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
WooCommerce Cart Abandonment Recovery
< 2.2.0
Unauthenticated Authentication Bypass vulnerability
3.7
1 hour ago
LatePoint
< 5.7.5
Unauthenticated Payment Bypass vulnerability
5.3
1 hour ago
Simple Shopping Cart
< 5.3.3
Unauthenticated Payment Bypass vulnerability
5.3
1 hour ago
CMP – Coming Soon & Maintenance
4.1.19-4.1.20
Unauthenticated Maintenance Mode Bypass vulnerability
5.3
1 hour ago
Wava Payment
0.3.1-0.3.9
Unauthenticated Merchant Credential Overwrite vulnerability
6.5
1 hour ago
WholesaleX
< 3.0.9
Unauthenticated Imported User CSV Disclosure vulnerability
5.9
1 hour ago
Profile Builder
< 4.0.1
Reflected XSS vulnerability
7.1
1 hour ago
Redirection for Contact Form 7
2.2.7-3.2.11
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
WP Booking System
< 2.1.0.3
Reflected XSS vulnerability
7.1
1 hour ago
@apostrophecms/import-export
< 3.7.0
NPM: ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
7.5
1 hour ago
apostrophe
< 4.33.0
NPM: ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
7.5
1 hour ago
WC Ukraine Shipping
< 1.23.4
Subscriber+ Arbitrary Shipping Label Deletion vulnerability
4.3
2 hours ago
Simple Banner
< 3.3.3
Authenticated Privilege Escalation vulnerability
7.5
2 hours ago
Moloni
< 5.0.14
Subscriber+ Arbitrary Order Invoice Generation vulnerability
6.5
2 hours ago
Ettrick Escape Room Booking
< 1.3.1
Unauthenticated Payment Confirmation Bypass vulnerability
5.3
2 hours ago
Falang multilanguage
< 1.4.6
Subscriber+ Stored XSS vulnerability
6.5
2 hours ago
Synchrony Financing
1.0.5-1.1.1
Unauthenticated Order Takeover vulnerability
6.5
2 hours ago
Click n Chat (Chat Widget Integration)
1.0.4-1.1.2
Unauthenticated SQLi vulnerability
9.3
2 hours ago
Click n Chat (Chat Widget Integration)
< 1.1.3
Unauthenticated SQLi vulnerability
9.3
2 hours ago
WholesaleX
< 3.0.9
Unauthenticated Account Activation and Administrator Approval Bypass vulnerability
6.5
2 hours ago
Load more