The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,986
Mitigations16,980
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
n8n< 1.123.76
NPM: n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
7.1
1 hour ago
n8n< 1.123.76
NPM: n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
7.1
1 hour ago
n8n< 2.37.7
NPM: n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
8.7
1 hour ago
n8n< 1.123.76
NPM: n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution
8.7
1 hour ago
@eigenpal/docx-editor-core<= 1.8.2
NPM: @eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name
8.1
1 hour ago
@eigenpal/docx-editor-react<= 1.8.2
NPM: @eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name
8.1
1 hour ago
Booktics<= 1.0.23
WordPress Booktics - Booking Calendar for Appointments and Service Businesses plugin <= 1.0.23 - Missing Authorization vulnerability
5.3
1 hour ago
Bold Timeline Lite<= 1.2.8
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
6.5
1 hour ago
Insert or Embed Articulate Content into WordPress< 4.3000000025
Author+ Upload to RCE vulnerability
9.1
2 hours ago
Text Snippets<= 0.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Posts map<= 0.1.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
WPMK Block<= 1.0.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Quran Live Multilanguage<= 1.0.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
ER Swiffy Insert<= 1.0.0
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Slider Bootstrap Carousel<= 1.0.7
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Easy Social Photos Gallery – MIF<= 3.1.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Switch CTA Box<= 1.1
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Bread & Butter< 8.7.0.139
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
Twittee Text Tweet<= 1.0.8
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
AcyMailing SMTP Newsletter<= 11.0.4
WordPress AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter vulnerability
7.5
2 hours ago