Pricing
Case studies
Login
Start trial
The leading open source vulnerability database
Instantly mitigate vulnerabilities in WordPress websites with Patchstack.
See pricing
Rated 4.9
Total
56,407
Mitigations
Mitigation rules
19,064
No official patch
13,632
In triage
1,108
Published soon
6
Stats
WordPress stats
Search
Everything
Vulnerabilities
Priority
CVSS
0
10
Mitigation available
Exploited
Clear filters
Affected software | Vulnerability
Risk
Disclosed
Quick Event Manager
9.9.5-9.18
Unauthenticated PayPal IPN Verification Bypass vulnerability
5.3
12 minutes ago
WP Libre Form
<= 1.5.0.1
Unauthenticated RCE vulnerability
10
12 minutes ago
Mobile DJ Manager
<= 1.7.8.7
Subscriber+ Stored XSS vulnerability
6.5
22 minutes ago
Mobile Events Manager
<= 1.7.8.7
Subscriber+ Stored XSS vulnerability
6.5
22 minutes ago
Mobile Events Manager
<= 1.7.8.7
Subscriber+ Account Takeover vulnerability
8.8
24 minutes ago
Mobile DJ Manager
<= 1.7.8.7
Subscriber+ Account Takeover vulnerability
8.8
25 minutes ago
Mobile Events Manager
<= 1.7.8.7
Unauthenticated Arbitrary Role Deletion vulnerability
9.1
26 minutes ago
Mobile DJ Manager
<= 1.7.8.7
Unauthenticated Arbitrary Role Deletion vulnerability
9.1
27 minutes ago
AutomatorWP
< 6.0.7
Unauthenticated Zoom/AWeber Integration Connection Hijack vulnerability
5.6
30 minutes ago
Spam protection, AntiSpam, FireWall by CleanTalk
< 6.91
Unauthenticated Stored XSS vulnerability
7.1
32 minutes ago
Advanced Custom Fields
< 6.8.11
Unauthenticated Stored XSS vulnerability
7.1
32 minutes ago
iubenda
< 3.13.7
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
All-in-One Video Gallery
< 5.1.0
Subscriber+ Stored XSS vulnerability
6.5
1 hour ago
Surfer
< 1.8.1.759
Contributor+ Privilege Escalation vulnerability
8.1
1 hour ago
Ever Accounting
< 2.3.3
Accounting Manager+ Arbitrary File Deletion vulnerability
8.7
1 hour ago
Wurdey
<= 1.0.0
Unauthenticated Administrator Authentication Bypass vulnerability
9.8
1 hour ago
MCB
<= 1.0.0
Unauthenticated Stored XSS vulnerability
7.1
1 hour ago
AMP for WP
<= 1.1.18
Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
5.4
1 hour ago
BuddyForms
<= 2.10.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Smart Cookie Kit
<= 2.3.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Load more