The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total57,179
Mitigations19,331
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Flatsome<= 3.20.12
Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability
6.5
59 minutes ago
@nuxt/nitro-server>= 4.6.0, < 4.6.4
npm: Nuxt: Incomplete fix for GHSA-9v7c-q64q-vv33: a leading `//` in the request path bypasses `server/middleware` path checks and server route rules on page routes
6.5
1 hour ago
@opentelemetry/instrumentation-http>= 0.204.0, < 0.222.0
npm: OpenTelemetry JavaScript: Insertion of Sensitive Information into Log File and Exposure of Sensitive Information to an Unauthorized Actor in @opentelemetry/instrumentation-http
5.8
1 hour ago
astro<= 7.4.4
npm: Astro: XSS via attribute injection in dynamic tag names
2.3
2 hours ago
astro>= 5.14.3, <= 7.4.6
npm: Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems
6.3
2 hours ago
@astrojs/node<= 11.1.11
npm: Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems
6.3
2 hours ago
@nuxt/schema>= 3.5.0, < 4.6.4
npm: Nuxt dev server serves files from a parent directory with a stray lockfile or workspace file
5.9
2 hours ago
AutomatorWP Pro Webhooks<= 1.4.4
Missing Authorization to Unauthenticated Arbitrary User Password Reset / Account Takeover via Webhook with 'Is the user ID' Field vulnerability
9.8
3 hours ago
Optimole<= 4.2.19
Unauthenticated PHP Object Injection to Arbitrary File Deletion via 'comment_content'/'comment_agent' Parameter during Attachment Rename vulnerability
7.1
3 hours ago
Spectra<= 2.20.5
Sensitive Data Exposure vulnerability
5.3
5 hours ago
RepairBuddy<= 4.1236
Broken Access Control vulnerability
5.3
5 hours ago
Extension for Leaflet Map<= 6.1.1
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
Church Admin<= 5.1.8
Broken Access Control vulnerability
5.3
5 hours ago
PowerPack Lite for Beaver Builder<= 1.3.2
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
Imagify<= 2.3.4
Broken Access Control vulnerability
4.3
5 hours ago
Event Tickets<= 5.31.0
Broken Access Control vulnerability
5.3
5 hours ago
myCred<= 4.0.2
SQL Injection vulnerability
8.5
6 hours ago
myCred<= 4.0.2
Broken Access Control vulnerability
4.3
6 hours ago
myCred<= 4.0.2
Cross Site Scripting (XSS) vulnerability
6.5
6 hours ago
s2Member<= 261106
Content Injection vulnerability
5.3
6 hours ago