The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,791
Mitigations18,164
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Site Reviews<= 8.3.4
Broken Access Control vulnerability
5.3
8 minutes ago
Product Delivery Date for WooCommerce – Lite< 3.3.2
Contributor+ Order Information Disclosure vulnerability
2.7
1 hour ago
affiliate-toolkit< 3.8.9
Editor+ SQL Injection vulnerability
6.8
1 hour ago
Smush Image Compression and Optimization< 4.3.4
Admin+ Network-Wide Plugin Settings Update on Multisite vulnerability
2.7
1 hour ago
Salon booking system< 10.31.9
Administrator Account Creation vulnerability
8.8
1 hour ago
Salon booking system< 10.31.9
Unauthenticated Booking Creation with Arbitrary Customer ID and Status vulnerability
5.3
1 hour ago
Salon booking system< 10.31.3
Subscriber+ Booking PII Disclosure vulnerability
4.3
1 hour ago
MB Custom Post Types & Custom Taxonomies< 2.12.2
Subscriber+ Missing Authorization vulnerability
4.2
1 hour ago
Visual Form Builder<= 3.1
Subscriber+ Sensitive Data Disclosure vulnerability
4.3
1 hour ago
Visual Form Builder<= 3.1
Subscriber+ Arbitrary Form Field Reordering vulnerability
4.3
1 hour ago
Document Gallery<= 5.1.1
Unauthenticated Non-Public Attachment Disclosure vulnerability
5.3
1 hour ago
Coinsnap Bitcoin Crowdfunding<= 1.2.0
Unauthenticated Payment Record Forgery vulnerability
5.3
1 hour ago
@tanstack/vue-start>= 1.143.12, < 1.168.56
NPM: TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
9.3
10 hours ago
@tanstack/solid-start>= 1.143.12, < 1.168.57
NPM: TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
9.3
10 hours ago
@tanstack/react-start>= 1.143.12, < 1.168.60
NPM: TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
9.3
10 hours ago
@tanstack/start-server-core>= 1.143.12, < 1.169.39
NPM: TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
9.3
10 hours ago
@anthropic-ai/claude-code< 2.1.179
NPM: Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
7.5
10 hours ago
@qwik.dev/core< 2.0.0-beta37
NPM: Qwik: Crashing any Qwik Server via Resource thenable
8.7
10 hours ago
@builder.io/qwik< 1.20.0
NPM: Qwik: Crashing any Qwik Server via Resource thenable
8.7
10 hours ago
@backstage/backend-defaults< 0.17.8
NPM: Backstage: Improper access control in backend action invocation
4.3
10 hours ago