The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total44,758
Mitigations17,935
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WordPress7.1-7.1.2
Unauthenticated Stored Cross-Site Scripting via Pending Comments (Comments administration screen) vulnerability
7.1
6 days ago
WordPress<= 7.1.2
Authenticated (Contributor+) Stored Cross-Site Scripting via Imgur oEmbed vulnerability
6.5
6 days ago
WordPress<= 7.1.2
Author+ Broken Access Control to Sticky Posts via REST API vulnerability
4.3
6 days ago
WordPress<= 7.1.2
Contributor+ DoS via infinite loop in WP_Http::make_absolute_url() vulnerability
4.3
6 days ago
WordPress<= 7.1.2
Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
6.9
6 days ago
WordPress<= 7.1.1
Unauthenticated Local File Inclusion to Remote Code Execution vulnerability
9.2
22/09/2026
WordPress<= 7.1
Cross Site Scripting (XSS) vulnerability
7.1
18/09/2026
WordPress<= 7.1
Contributor+ Draft and Pending Post Slug Disclosure vulnerability
4.3
18/09/2026
WordPress<= 7.1
Author+ Private Parent Post Title Disclosure vulnerability
4.3
18/09/2026
WordPress<= 7.1
Contributor+ Path Traversal in REST Templates Controller vulnerability
4.3
18/09/2026
WordPress<= 7.1
Cross-Site Request Forgery to Theme Install and Preview vulnerability
4.3
18/09/2026
WordPress<= 7.1
Contributor+ Stored XSS via HTML API Comment Breakout vulnerability
4.4
18/09/2026
WordPress<= 7.1
Admin+ Stored XSS in Custom Header Images vulnerability
4.8
18/09/2026
WordPress<= 7.1
Subscriber+ Comment and Note Reparenting vulnerability
5.4
18/09/2026
WordPress<= 7.1
Author+ Custom CSS Capability Bypass via XML-RPC vulnerability
6.4
18/09/2026
WordPress<= 7.1
Contributor+ Arbitrary Post Overwrite vulnerability
6.5
18/09/2026
WordPress<= 7.1
Broken Access Control vulnerability
6.6
18/09/2026
WordPress<= 7.0.3
Authenticated (Author+) File Type Confusion to Remote Code Execution vulnerability
9.1
12/08/2026
WordPress< 7.0.3
Email Confirmation Bypass vulnerability
5.3
11/08/2026
WordPress< 7.0.3
SSRF vulnerability
5.4
07/08/2026