Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,121
Mitigations
Mitigation rules
18,959
No official patch
13,643
In triage
938
Published soon
39
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Meow Lightbox
<= 5.6.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
49 minutes ago
Ninja Forms
<= 3.15.5
Unauthenticated Arbitrary Shortcode Execution vulnerability
5.3
50 minutes ago
CP Multi View Event Calendar
<= 1.4.43
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
50 minutes ago
NextGEN Gallery
<= 4.5.4
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
50 minutes ago
FV Flowplayer Video Player
<= 7.5.55.7212
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
50 minutes ago
FV Flowplayer Video Player
<= 7.5.55.7212
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
51 minutes ago
Avada
<= 7.16.2
Unauthenticated Arbitrary File Upload vulnerability
8.1
1 hour ago
FV Flowplayer Video Player
<= 7.5.55.7212
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
NextGEN Gallery
<= 4.4.1
Authenticated (Custom+) Local File Inclusion vulnerability
7.5
1 hour ago
User Submitted Posts
<= 20260916
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 hour ago
W3 Total Cache
<= 2.10.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
PDF Invoice Builder for WooCommerce
<= 7.1.1
Unauthenticated PHP Object Injection to Remote Code Execution vulnerability
9.8
1 hour ago
WP ERP
<= 1.17.10
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
WooCommerce PDF Invoices & Packing Slips
<= 5.16.4
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Welcart e-Commerce
<= 2.12.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
W3 Total Cache
<= 2.10.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Shield Security
<= 22.3.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Spectra
<= 2.20.4
Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification vulnerability
6.5
1 hour ago
Uncanny Toolkit for LearnDash
<= 3.8.2
Unauthenticated Authentication Bypass vulnerability
9.8
1 hour ago
WP User Frontend
<= 4.3.13
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
1 hour ago
Load more