The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,967
Mitigations16,613
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WordPress<= 7.0.3
Authenticated (Author+) File Type Confusion to Remote Code Execution vulnerability
9.1
12/08/2026
WordPress< 7.0.3
Email Confirmation Bypass vulnerability
5.3
11/08/2026
WordPress< 7.0.3
SSRF vulnerability
5.4
07/08/2026
WordPress< 7.0.3
CSS Injection vulnerability
5.9
07/08/2026
WordPress< 7.0.3
Sensitive Data Exposure vulnerability
5.3
07/08/2026
WordPress< 7.0.3
Sensitive Data Exposure vulnerability
5.3
07/08/2026
WordPress< 7.0.3
Stored XSS vulnerabiliity
6.5
07/08/2026
WordPress7.0-7.0.2
Unauthenticated Sensitive Data Exposure vulnerability
5.3
06/08/2026
WordPress< 7.0.3
Multiple Contributor+ Stored XSS vulnerabilities
6.5
06/08/2026
WordPress< 7.0.3
Subscriber+ Site Creation vulnerability
7.1
06/08/2026
WordPress< 7.0.3
Reflected XSS to RCE vulnerability
7.1
06/08/2026
WordPress<= 7.0.1
Unauthenticated REST API Batch Request Handler Confusion
9.1
17/07/2026
WordPress<= 7.0.1
Unauthenticated SQL Injection vulnerability
9.8
17/07/2026
WordPress<= 6.9.3
XML External Entity (XXE) vulnerability
6.5
10/03/2026
WordPress6.9-6.9.3
Broken Access Control in Notes vulnerability
4.3
10/03/2026
WordPress<= 6.9.1
Missing Authorization to Authenticated (Author+) Sensitive Information Disclosure vulnerability
4.3
10/03/2026
WordPress6.9-6.9.1
Server-Side Request Forgery (SSRF) vulnerability
5.4
10/03/2026
WordPress6.9-6.9.1
Cross-Site Scripting vulnerability
5.5
10/03/2026
WordPress6.9-6.9.1
Stored Cross-Site Scripting
5.9
10/03/2026
WordPress<= 6.8.2
(Author+) Cross Site Scripting (XSS) Vulnerability
5.9
22/09/2025