Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
55,800
Mitigations
Mitigation rules
18,585
No official patch
13,652
In triage
1,003
Published soon
32
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Password Protected
<= 2.8.4
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
27 minutes ago
Schema App Structured Data
<= 2.3.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
28 minutes ago
WordPress
<= 7.1.3
Unauthenticated Remote Code Execution via Core Update Race Condition
9
50 minutes ago
WordPress
<= 7.1.3
Subscriber+ Stored Cross-Site Scripting via Multisite Network Users Screens
5.4
51 minutes ago
WordPress
<= 7.1.3
Unauthenticated Sensitive Data Exposure of Unpublished Customizer Changesets
5.3
52 minutes ago
WordPress
<= 7.1.3
Custom Role Broken Access Control to Post Notes
3.8
52 minutes ago
WordPress
<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Customizer Selective Refresh
6.5
52 minutes ago
WordPress
<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Block Delimiter Whitespace
5.4
54 minutes ago
WordPress
<= 7.1.3
Editor+ Stored Cross-Site Scripting via Personal Data Erasure Requests Screen
6.5
54 minutes ago
WordPress
<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Interactivity API javascript: URLs
6.5
54 minutes ago
WordPress
<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Interactivity API Event Handler Bindings
7.4
54 minutes ago
WordPress
<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Interactivity API Context Prototype Pollution
7.4
54 minutes ago
WordPress
<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Interactivity API Bindings
7.4
54 minutes ago
WordPress
<= 7.1.3
Contributor+ Denial of Service via Interactivity API Bindings
5
55 minutes ago
WordPress
<= 7.1.3
Contributor+ Broken Access Control via Interactivity API Object Element Bindings
5
55 minutes ago
WordPress
<= 7.1.3
Author+ Stored Cross-Site Scripting via Interactivity Router Uploaded Files
6.5
55 minutes ago
WordPress
<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Script Module Data Shadowing
7.4
55 minutes ago
WordPress
<= 7.1.3
Contributor+ Stored Cross-Site Scripting via Categories Block Format String
5.4
55 minutes ago
WordPress
<= 7.1.3
Author+ Stored Cross-Site Scripting via Image and Playlist Block Insertion
7.4
56 minutes ago
DSGVO All in one for WP
<= 5.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Load more