Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
47,494
Mitigations
Mitigation rules
15,273
No official patch
12,878
In triage
1,523
Published soon
6
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
<= 2.0.8
SQL Injection vulnerability
8.5
04/06/2026
Sunshine Photo Cart
<= 3.6.7
Broken Access Control vulnerability
6.3
02/06/2026
SePay Gateway
<= 1.1.20
Sensitive Data Exposure vulnerability
6.5
02/06/2026
NanoCare
< 1.2.2
Broken Access Control vulnerability
5.4
47 minutes ago
CformsII
<= 15.1.3
Cross Site Request Forgery (CSRF) vulnerability
7.1
1 hour ago
Broadcast Live Video
< 7.1.3
Remote Code Execution (RCE) vulnerability
7.2
1 hour ago
WP Search Analytics
< 1.5.0
Broken Access Control vulnerability
5.3
1 hour ago
RSVP and Event Management
<= 2.7.16
Broken Access Control vulnerability
5.3
1 hour ago
B2BKing
< 5.2.10
Broken Access Control vulnerability
4.9
1 hour ago
WPSubscription
<= 1.9.1
Cross Site Request Forgery (CSRF) vulnerability
4.3
1 hour ago
Autoship Cloud for WooCommerce Subscription Products
<= 2.14.0
Broken Access Control vulnerability
4.3
1 hour ago
Team Showcase
<= 1.22.28
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Newses
<= 2.0.0.77
Broken Access Control vulnerability
5.4
1 hour ago
Auto Affiliate Links
<= 6.8.8.3
Broken Access Control vulnerability
5.3
1 hour ago
FlexTable
<= 3.24.0
Broken Access Control vulnerability
4.3
2 hours ago
QR Redirector
<= 2.0.3
Broken Access Control vulnerability
4.3
2 hours ago
Export WP Page to Static HTML/CSS
<= 6.0.0
Cross Site Request Forgery (CSRF) vulnerability
6.5
2 hours ago
Organization chart
<= 1.7.5
Cross Site Request Forgery (CSRF) vulnerability
4.3
2 hours ago
GamiPress
<= 7.6.3
Broken Access Control vulnerability
5.3
4 hours ago
Fusion Builder
<= 3.15.2
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
15 hours ago
Load more