[ Web Proxy ]
URL:
Viewing:
https://patchstack.com/database/statistics/wordpress/2026
[Back]
[Original]
WordPress Vulnerability Statistics - Patchstack
Pricing
Case studies
Login
Start trial
Recently exploited vulnerabilities
Get more with our API
Affected software | Vulnerability
Priority
Disclosed
Restaurant Menu by MotoPress
<= 2.4.11
Local File Inclusion vulnerability
8.1
1 day ago
WP Compress
< 7.20.01
Remote Code Execution (RCE) vulnerability
10
1 day ago
Forminator
<= 1.56.1
Unauth. Arbitrary File Upload
9.8
2 days ago
Pods
3.3-3.3.9
Unauthenticated Privilege Escalation vulnerability
9.8
4 days ago
W3 Total Cache
<= 2.10.3
Unauthenticated Stored Cross-Site Scripting via Comment Author Name vulnerability
7.1
5 days ago
WordPress vulnerability statistics
All time
General WordPress security vulnerability statistics powered by the Patchstack Vulnerability Database.
Vulnerabilities disclosed via Patchstack
3,228
By Patchstack Alliance
3,371
By other sources
Most common security vulnerabilities
How to patch common vulnerabilities
#1
Cross-Site Scripting (XSS)
31.96%
#2
Other vulnerabilities
27.64%
#3
Broken Access Control
21.50%
#4
SQL Injection
7.91%
#5
Cross-Site Request Forgery (CSRF)
4.91%
#6
Sensitive Data Exposure
4.12%
#7
Arbitrary File Upload
1.95%
Disclosed by
Patchstack
Other sources
Patch status of published vulnerabilities
Not patched
#1,798
27%
Patched
#4,801
73%
Breakdown by software type
Plugin
#5,699
86%
Theme
#881
13%
Core
#19
0%
Breakdown by patch priority
High (Resolve immediately)
#1,716
26%
Medium (Resolve in 14 days)
#1,386
21%
Low (Resolve in 30 days)
#3,497
53%
Breakdown by CVSS severity
Critical (9.0-10.0)
#723
11%
High (7.0-8.9)
#2,443
37%
Medium (4.0-6.9)
#3,392
51%
Low (0.1-3.9)
#40
1%
Top security researchers by contributions
See leaderboard
# Researcher
Reports
Country
Plugins with a VDP earn +15%
XP and
Zeroday payouts up to $33,000!
Plugins with a VDP earn +15% XP and Zeroday payouts up to $33,000!
Read more
1
[Avatar]
Joo Pedro S Alcnta...
Joo Pedro S Alcntara (Kinorth)
832
2
[Avatar]
Tran Nguyen Bao Khan...
Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immu...
650
3
[Avatar]
Nguyen Ba Khanh - HP...
Nguyen Ba Khanh - HPT Vietnam Corporation
607
4
[Avatar]
Bonds
Bonds
477
5
[Avatar]
daroo
daroo
421
6
[Avatar]
Ananda Dhakal (Patch...
Ananda Dhakal (Patchstack)
395
7
[Avatar]
Nabil Irawan
Nabil Irawan
360
8
[Avatar]
johska
johska
341
9
[Avatar]
Jakub Herman
Jakub Herman
311
10
[Avatar]
Phat RiO
Phat RiO
249
Vulnerability mitigation
Pricing
Application security (SCA)
RapidMitigate
New
Threat Intelligence (API)
VS Monarx
VS Imunify360
VS Wordfence
Documentation
Service status
Log in
Code security
Managed VDP
New
Active VDP directory
1,217
Report vulnerability
Security auditing
Compliance (CRA)
New
Log in
New
Bug bounty
Bug bounty
Leaderboard
Guidelines
Learn
New
Report
Discord
Log in
New
Use cases
Web developers
Webhosts
New
Software vendors
WordPress
WooCommerce
Resources
Partners
Vulnerability database
Whitepaper 2026
New
Articles
Case studies
New
Webinars
New
Vulnerability statistics
Patchstack
About
Compliance
New
Careers
Merch store
Media kit
LinkedIn
Facebook
X
2026
Patchstack
DPA
Privacy Policy
Accessibility
Terms & Conditions
Web Proxy Viewer |
New URL
|
Original Page