Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
52,848
Mitigations
Mitigation rules
17,267
No official patch
13,363
In triage
1,366
Published soon
38
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
knowns
<= 0.29.1
NPM: Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools
8.8
3 hours ago
@openzeppelin/confidential-contracts
< 0.3.2
NPM: OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet
7.1
3 hours ago
Automatic.css
4.0.0
Unauthenticated Stored Cross-Site Scripting via REQUEST_URI vulnerability
7.1
8 hours ago
wpForo Forum
3.0.0-3.1.5
Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass vulnerability
5.3
13 hours ago
Link Library
< 7.9.6
Reflected XSS vulnerability
7.1
13 hours ago
Themify Builder
<= 7.8.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
BP Better Messages
<= 3.0.4
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
13 hours ago
Repeater Fields for Elementor Forms
<= 2.2.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
Fancy Product Designer
<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
Bookly
<= 28.2
Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion vulnerability
6.5
13 hours ago
HT Contact Form 7
<= 2.10.1
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
13 hours ago
Bookly
<= 28.2
Unauthenticated Authorization Bypass vulnerability
5.3
13 hours ago
GeoDirectory
<= 2.8.183
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
13 hours ago
WP Maps
<= 4.9.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
13 hours ago
Fancy Product Designer
<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
Restaurant Menu by MotoPress
<= 2.4.14
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
Fancy Product Designer
<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
AMP for WP
<= 1.1.16
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
WPDM – Premium Packages
<= 7.2.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
13 hours ago
JetFormBuilder
<= 3.6.5.3
Reflected Cross-Site Scripting vulnerability
7.1
13 hours ago
Load more