Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,248
Mitigations
Mitigation rules
19,001
No official patch
13,626
In triage
1,017
Published soon
16
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
@enspirit/elo
<= 1.0.0
npm: Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access
9.8
4 hours ago
@enspirit/elo
<= 1.0.0
npm: Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
9.8
4 hours ago
@enspirit/elo
<= 1.0.0
npm: Elo backends have code injection via unvalidated emission of programmatic AST fields
7.4
4 hours ago
ClickCease Click Fraud Protection
<= 3.3.0
Broken Access Control vulnerability
5.3
5 hours ago
myCred
<= 4.0.2
Broken Access Control vulnerability
4.3
5 hours ago
AnyWhere Elementor
<= 1.3.0
Broken Access Control vulnerability
5.3
5 hours ago
Elementor Website Builder
<= 4.3.5
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
myCred
<= 4.0.2
Broken Access Control vulnerability
4.3
5 hours ago
AnyWhere Elementor
<= 1.3.0
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
Dokan
<= 5.3.2
Broken Access Control vulnerability
5.3
5 hours ago
WCFM Membership
<= 2.12.0
Broken Access Control vulnerability
4.3
5 hours ago
Dokan
<= 5.3.2
Broken Access Control vulnerability
5.3
5 hours ago
Posts Table with Search & Sort
<= 1.4.14
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
AnyWhere Elementor
<= 1.3.0
Sensitive Data Exposure vulnerability
6.5
5 hours ago
Forminator
<= 1.58.3
Broken Access Control vulnerability
5.3
5 hours ago
Forminator
<= 1.58.3
Content Injection vulnerability
4.3
5 hours ago
WCFM Membership
<= 2.12.0
Broken Access Control vulnerability
5.3
5 hours ago
Uncanny Automator
<= 7.7.1
Broken Access Control vulnerability
5.3
5 hours ago
Paid Member Subscriptions
<= 3.1.3
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
Better Search
<= 4.5.2
Broken Access Control vulnerability
5.3
5 hours ago
Load more