The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,969
Mitigations18,238
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Seriously Simple Podcasting<= 3.17.0
Broken Access Control vulnerability
5.3
5 minutes ago
Seriously Simple Podcasting<= 3.17.0
Cross Site Scripting (XSS) vulnerability
6.5
5 minutes ago
@angular/router<= 19.2.25
NPM: @angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)
8.2
22 minutes ago
hono>= 4.12.4, < 4.13.11
NPM: Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
5.3
22 minutes ago
@angular/platform-server<= 19.2.25
NPM: @angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
5.1
22 minutes ago
markdown-it< 14.3.2
NPM: markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes
7.5
23 minutes ago
Brizy2.8.23
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
DiviGear Carousel<= 5.2.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
8 hours ago
Document Gallery4.1-5.1.1
Unauthenticated Document Thumbnail Replacement vulnerability
5.3
8 hours ago
BDM Digital Payment Gateway1.2.7-1.3.12
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
8 hours ago
Coinbase Commerce Payment Gateway for WooCommerce<= 1.4.1
Unauthenticated Webhook Signature Bypass vulnerability
5.3
8 hours ago
WP Photo Album Plus< 9.2.11.002
Reflected XSS vulnerability
7.1
8 hours ago
WP User Manager2.9-2.9.19
Unauthenticated Account Creation vulnerability
5.3
8 hours ago
EventON - Subscriber<= 1.4.5
WordPress EventON - Subscriber plugin <= 1.4.5 - Unauthenticated SQL Injection vulnerability
9.3
8 hours ago
Easy Property Listings< 3.5.27
Subscriber+ Sensitive Data Disclosure vulnerability
4.3
8 hours ago
Easy Property Listings< 3.5.28
Unauthenticated Hidden Listing Details Disclosure vulnerability
5.3
8 hours ago
Classified Listing<= 6.1.5
Direct static code injection vulnerability
4.3
1 day ago
Surfer<= 1.8.0.744
Broken Access Control vulnerability
5.4
1 day ago
WP Mailster<= 1.9.1.0
Local File Inclusion vulnerability
6.5
1 day ago
Event Tickets<= 5.30.1
Insecure Direct Object References (IDOR) vulnerability
4.3
1 day ago