Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,511
Mitigations
Mitigation rules
19,139
No official patch
13,632
In triage
1,113
Published soon
11
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
JetFormBuilder
<= 3.6.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
JetFormBuilder
<= 3.6.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
JetFormBuilder
<= 3.6.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
WP ImageViewer
<= 3.0.2
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
2 hours ago
AnyWhere Elementor
<= 1.3.0
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
2 hours ago
Happyforms Pro
<= 1.38.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Happyforms Pro
<= 1.38.9
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Link Library
<= 7.10.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
GamiPress
<= 8.1.1
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
2 hours ago
Image Hover Effects Ultimate
<= 9.12.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Church Admin
<= 5.1.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
wpForo Forum
<= 3.2.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
WP Data Access
<= 5.5.89
Incorrect Authorization to Unauthenticated Privilege Escalation vulnerability
9.8
2 hours ago
WS Form LITE
<= 1.12.18
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
WPJAM Basic
<= 7.1
Unauthenticated Privilege Escalation to 'data[args][role]' Parameter vulnerability
9.8
2 hours ago
Real Testimonials
<= 4.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Advanced Form Integration
<= 2.10.2
Unauthenticated PHP Object Injection vulnerability
9.8
2 hours ago
TranslatePress
<= 3.3.8
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
QA Analytics
<= 5.3.0
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
9.8
2 hours ago
WP Data Access
<= 5.5.89
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
Load more