Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
50,989
Mitigations
Mitigation rules
16,616
No official patch
13,329
In triage
1,039
Published soon
7
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Media LIbrary Assistant
< 3.40
Author+ SQL Injection via mla_search_connector vulnerability
8.5
4 minutes ago
Tamara Checkout
<= 1.9.9.20
Unauthenticated Order Status Manipulation vulnerability
5.3
4 minutes ago
Dokan
< 5.0.14
Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied Amount vulnerability
2.7
5 minutes ago
Dokan
< 5.0.14
Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint vulnerability
5.3
6 minutes ago
Link Whisper Free
< 0.9.7
Editor+ SQL Injection via domain Parameter vulnerability
8.5
7 minutes ago
Drag and Drop Multiple File Upload – Contact Form 7
< 1.3.9.9
Admin+ Stored XSS via drag_n_drop_heading_tag Setting vulnerability
5.9
7 minutes ago
NewPath WildApricotPress Add-on for Member Directory
<= 1.0.0
WordPress NewPath WildApricotPress Add-on - Member Directory plugin <= 1.0.0 - Unauthenticated Member PII Disclosure via REST API vulnerability
5.3
8 minutes ago
Magazine Blocks
<= 1.8.6
Cross Site Scripting (XSS) vulnerability
6.5
35 minutes ago
RepairBuddy
<= 4.1223
Broken Access Control vulnerability
5.3
35 minutes ago
Hash Form
<= 1.4.0
Cross Site Request Forgery (CSRF) vulnerability
4.3
40 minutes ago
Fluent Support Pro
<= 2.3.1
Cross Site Request Forgery (CSRF) vulnerability
5.4
41 minutes ago
Fluent Boards Pro
<= 2.0.11
Insecure Direct Object References (IDOR) vulnerability
5.3
41 minutes ago
FluentCRM Pro
<= 3.1.12
Server Side Request Forgery (SSRF) vulnerability
4.9
42 minutes ago
Fluent Support Pro
<= 2.3.1
Broken Access Control vulnerability
5.4
48 minutes ago
FluentCRM Pro
<= 3.1.12
SQL Injection vulnerability
7.6
49 minutes ago
Shared Files
<= 1.7.69
Server Side Request Forgery (SSRF) vulnerability
6.4
50 minutes ago
Booking and Rental Manager
<= 2.7.5
Broken Access Control vulnerability
5.3
58 minutes ago
Templately
< 3.7.1
Unauthenticated Administrator Templately Cloud Connection Overwrite vulnerability
6.5
3 hours ago
Kirki
< 6.2.1
Unauthenticated Arbitrary Shortcode Execution via Form Email Actions vulnerability
6.5
3 hours ago
TeraWallet – For WooCommerce
< 1.6.10
WordPress TeraWallet - Wallet for WooCommerce plugin < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up vulnerability
4.3
3 hours ago
Load more