The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,203
Mitigations16,216
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
mermaid< 10.9.8
NPM: Mermaid configuration APIs allow prototype pollution
2.4
16 minutes ago
mermaid< 10.9.8
NPM: Mermaid allows CSS injection applying to sibling elements of the diagram
5.3
20 minutes ago
mermaid>= 11.5.0, < 11.16.1
NPM: Mermaid Architecture diagrams are vulnerable to prototype pollution
6.5
23 minutes ago
mermaid>= 10.6.0, < 10.9.8
NPM: Mermaid XY Charts are vulnerable to an infinite loop DoS
5.3
25 minutes ago
WordPress< 7.0.3
Reflected XSS to RCE vulnerability
7.1
32 minutes ago
Simply Schedule Appointments< 1.6.12.6
Unauthenticated Appointment Data Disclosure and Mass Deletion vulnerability
6.5
8 hours ago
Simple Restrict< 1.2.9
Contributor+ Restricted Content Disclosure vulnerability
2.7
8 hours ago
ChatBot for eCommerce &#8211; WoowBot< 4.8.4
Unauthenticated Gemini API Key Abuse vulnerability
6.5
8 hours ago
King Addons for Elementor< 51.1.76
Reflected XSS vulnerability
7.1
8 hours ago
webtoffee-cookie-consent< 3.5.3
Consent Log Disclosure/Deletion, Page Creation & License Deactivation vulnerability
6.4
9 hours ago
Advanced Custom Fields: Font Awesome Field<= 6.1.1
Broken Access Control vulnerability
4.3
9 hours ago
Theme My Login<= 7.1.14
Cross Site Request Forgery (CSRF) vulnerability
4.3
9 hours ago
Export Import Menus<= 1.9.2
Sensitive Data Exposure vulnerability
5.3
9 hours ago
Custom CSS and JavaScript<= 2.0.16
Sensitive Data Exposure vulnerability
5.3
9 hours ago
Forminator<= 1.56.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Plugins Garbage Collector (Database Cleanup)<= 0.14
Cross Site Request Forgery (CSRF) vulnerability
6.5
9 hours ago
Featured Video Plus<= 2.3.3
Sensitive Data Exposure vulnerability
5.3
9 hours ago
YOP Poll7.0.0-7.0.6
Unauthenticated Vote Restriction Bypass vulnerability
5.3
9 hours ago
TranslatePress<= 3.2.6
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
9 hours ago
Content Egg<= 11.3.0
Authenticated (Author+) Arbitrary File Deletion vulnerability
6.8
9 hours ago