The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,267
Mitigations18,301
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
HIPAA FORMS< 3.3.2
hipaa_forms+ Privilege Escalation vulnerability
7.2
12 minutes ago
Infility Global< 2.16.25
Unauthenticated Google Translate API Key Update vulnerability
7.5
15 minutes ago
Advanced Custom Fields: Extended PRO0.8.9.4-0.9.2.7
Contributor+ XSS vulnerability
6.8
46 minutes ago
ACF Extended0.8.9.4-0.9.2.7
Contributor+ XSS vulnerability
6.8
46 minutes ago
LiteSpeed Cache< 7.9.2
Subscriber+ Pinned Administrative Notice Dismissal vulnerability
3.1
46 minutes ago
Popup Builder< 4.4.6
Unauthenticated Popup Trashing vulnerability
3.7
46 minutes ago
Download Monitor< 5.3.5
Multisite Subsite Admin+ Incorrect Authorization vulnerability
4.9
46 minutes ago
Profile Builder< 4.0.5
Multisite Subsite Admin+ Network Super Admin Account Takeover vulnerability
7.2
46 minutes ago
Profile Builder< 4.0.5
Contributor+ Stored XSS vulnerability
6.5
46 minutes ago
Speed Optimizer< 7.8.5
Admin+ Network Option Update vulnerability
5.5
46 minutes ago
Speed Optimizer< 7.8.5
Admin+ Stored XSS vulnerability
5.9
46 minutes ago
Essential Addons for Elementor< 6.8.7
Admin+ Cross-Site User Approval State Change vulnerability
3.8
46 minutes ago
Essential Addons for Elementor< 6.8.7
Author+ Content Injection vulnerability
3.5
46 minutes ago
Otter - Gutenberg Block< 3.2.8
Unauthenticated Restricted Block Content Disclosure vulnerability
5.3
46 minutes ago
Otter - Gutenberg Block3.1.1-3.2.7
Unauthenticated Non-Public Content Disclosure vulnerability
5.3
46 minutes ago
Otter - Gutenberg Block< 3.2.8
Contributor+ Stored XSS vulnerability
6.5
46 minutes ago
@nuxt/nitro-server>= 3.20.0, < 4.0.0
NPM: Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive
6.3
13 hours ago
nuxt>= 3.0.0, < 4.0.0
NPM: Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive
6.3
13 hours ago
nuxt>= 3.13.0, < 4.6.2
NPM: Nuxt server islands render `useHeadSafe` input without sanitisation
5.4
13 hours ago
nuxt< 4.6.0
NPM: Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled
2.3
13 hours ago