The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total53,779
Mitigations17,720
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
knowns<= 0.29.1
NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
7.8
4 hours ago
WordPress7.1-7.1.2
Unauthenticated Stored Cross-Site Scripting via Pending Comments (Comments administration screen) vulnerability
7.1
5 hours ago
WordPress<= 7.1.2
Authenticated (Contributor+) Stored Cross-Site Scripting via Imgur oEmbed vulnerability
6.5
5 hours ago
WordPress<= 7.1.2
Author+ Broken Access Control to Sticky Posts via REST API vulnerability
4.3
5 hours ago
WordPress<= 7.1.2
Contributor+ DoS via infinite loop in WP_Http::make_absolute_url() vulnerability
4.3
5 hours ago
WordPress<= 7.1.2
Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
6.9
5 hours ago
Kirki<= 6.3.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
5 hours ago
payload< 3.90.0
NPM: Payload didn't enforce field-level password update restrictions
7.6
6 hours ago
payload>= 3.0.0, < 3.90.0
NPM: Payload: ReDoS in Multipart Content-Type Validation
8.7
6 hours ago
payload>= 3.0.0, < 3.90.0
NPM: Payload vulnerable to API key disclosure through ordinary document reads
7.7
6 hours ago
@payloadcms/plugin-ecommerce< 3.90.0
NPM: Payload Ecommerce has an order confirmation validation issue
8.8
6 hours ago
payload< 3.90.0
NPM: Payload relationship-query authorization bypass
6.9
6 hours ago
payload>= 3.0.0, < 3.90.0
NPM: Payload: Token refresh and password reset responses may expose restricted user fields
7.1
6 hours ago
payload> 3.0.0, < 3.90.0
NPM: Payload: Field access control bypass on auth collections
9.3
6 hours ago
@payloadcms/plugin-stripe< 3.90.0
NPM: Payload: Insufficient Access Control in Stripe REST Proxy
6.4
7 hours ago
@payloadcms/plugin-mcp>= 3.61.0, < 3.88.0
NPM: Payload: Improper access control for MCP API keys
8.6
7 hours ago
@payloadcms/plugin-import-export>= 3.0.0, < 3.88.0
NPM: Payload: Prototype pollution in Payload Import Export plugin
9.3
7 hours ago
payload>= 3.0.0, < 3.88.0
NPM: Payload: SQL Injection in SQLite and Postgres
9.8
7 hours ago
@payloadcms/next>= 3.31.0, < 3.88.0
NPM: Payload: Untrusted redirect URL parameter exploit
6.1
7 hours ago
payload>= 3.40.0, < 3.88.0
NPM: Payload: Untrusted redirect URL parameter exploit
6.1
7 hours ago