Stop exploits before the fix ships
Known vulnerabilities in plugins and themes can leave your WordPress site open to attack. Vulnerability Protection, powered by Patchstack, automatically blocks exploit attempts until a security update is ready.
Attackers are only getting faster
Heavily targeted plugin flaws are mass-exploited in a median of 5 hours.
Vulnerability Protection blocks them from the moment they’re made public.
Keep vulnerabilities from becoming business disruptions
Protection while you wait for a fix
Help protect your site against known plugin and theme exploits, even when a developer hasn’t released an update.
Time to test before updating
Reduce the pressure to rush changes into production. Test available fixes on staging before applying them to your live site.
Lower risk of costly recovery
Reduce the risk of downtime, expensive cleanups, and damage to the trust your customers and clients place in you.
Protection tailored to your site
Powered by Patchstack’s vulnerability research, our protection keeps pace with new disclosures and targets the software your site actually uses.
Identify affected software
We identify when your plugins or themes are affected by known vulnerabilities, so you don’t have to track every disclosure across your sites.
Apply targeted protection
We automatically apply available mitigation rules at the WordPress application layer as new threats are identified. There’s nothing for you to install, configure, or manage.
Leave your code untouched
Protection blocks exploit attempts without modifying your plugin or theme code. Keep your software up to date to resolve the underlying vulnerability.



One more layer in Kinsta’s security suite
Vulnerability Protection sits alongside the tools that already keep Kinsta sites secure.
Bot protection
Control unwanted bot traffic to reduce performance strain and keep more resources available for your visitors.
DDoS protection and Cloudflare firewall
Defend your site against disruptive attacks and malicious traffic with built-in protection.
Automatic Updates
Keep your plugins and themes current with our optional paid add-on.
Malware removal
Recover from a compromise with expert help removing malware and restoring your site.
Peace of mind is a site that stays secure
“Since migrating our website over to Kinsta, we noticed an immediate improvement in our website uptime – we no longer faced the issue of our website going down. In addition, our website security has improved, and we have not experienced a website hack since.”
Jason Schulz
Co-Founder and CEO at 5Tales

FAQs
What is Vulnerability Protection?
Vulnerability Protection helps block attempts to exploit known vulnerabilities in WordPress plugins and themes. Powered by Patchstack and managed by Kinsta, it applies targeted mitigation rules to affected sites without modifying their plugin or theme code.
How is this different from updating my plugins?
Updates resolve vulnerabilities in the software itself. Vulnerability Protection helps block exploits while a fix is unavailable or hasn’t been applied. It adds protection during that window, but keeping your software updated is still essential.
How does it work with Kinsta Automatic Updates?
Automatic Updates is an optional paid add-on that installs plugin and theme updates when they are available. Vulnerability Protection is included with your hosting and helps protect against supported vulnerabilities while you wait for an update or test it before deployment.
Does Vulnerability Protection change my plugin or theme code?
No. It applies targeted protection rules to block exploit attempts without editing your plugin or theme files.
Which plugins and themes are covered?
Coverage depends on the vulnerabilities identified by Patchstack and the mitigation rules available for them. Protection targets supported vulnerabilities in affected plugin and theme versions; it does not mean every possible vulnerability is covered.
What if a plugin is abandoned and never gets a fix?
Vulnerability Protection can help block exploits against supported known vulnerabilities in abandoned plugins. You should still replace abandoned software, since mitigation doesn’t resolve the underlying issue or guarantee protection against future vulnerabilities.
Is Vulnerability Protection included in my plan?
Yes. Vulnerability Protection is included in every Kinsta plan at no additional cost.
What is Patchstack?
Patchstack is a security company specializing in vulnerability research and mitigation. Its technology powers Kinsta’s Vulnerability Protection, helping us identify affected software and apply targeted protection.
Can’t find what you’re looking for? Chat with us