The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,634
Mitigations16,875
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
orval< 8.21.0
NPM: Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)
9.3
59 minutes ago
orval< 8.21.0
NPM: Orval: Import-time RCE via schema default -> zod module-level template literal
9.3
1 hour ago
orval< 8.21.0
NPM: Orval: Import-time RCE via array-items default -> zod module-level template literal
9.3
1 hour ago
orval< 8.21.0
NPM: Orval: Import-time RCE via header-parameter default -> zod module-level template literal
9.3
1 hour ago
orval< 8.21.0
NPM: Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator
9.3
1 hour ago
orval< 8.21.0
NPM: Orval: Import-time RCE via enum-typed default -> zod module-level template literal
9.3
1 hour ago
orval< 8.21.0
NPM: Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli
9.3
1 hour ago
orval< 8.21.0
NPM: Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client
9.3
1 hour ago
liquidjs>= 10.26.0, < 10.27.1
NPM: LiquidJS has an infinite loop vulnerability in its `strip_html` filter
8.7
2 hours ago
@openclaw/feishu< 2026.6.9-beta.1
NPM: OpenClaw Feishu permission tools could ignore per-account disablement
8.1
2 hours ago
@openclaw/feishu< 2026.6.9-beta.1
NPM: OpenClaw Feishu tools could ignore per-account disablement
8.1
2 hours ago
SureForms<= 2.12.5
Insecure Direct Object References (IDOR) vulnerability
5.3
3 hours ago
Ultimate Maps by Supsystic<= 1.5.3
Broken Access Control vulnerability
5.3
3 hours ago
KP Agent Ready<= 1.1.99
Sensitive Data Exposure vulnerability
5.3
3 hours ago
MountDev AI MCP Connector for WordPress<= 1.6.5
Broken Access Control vulnerability
6.5
3 hours ago
SEOPress<= 10.1
Server Side Request Forgery (SSRF) vulnerability
5.4
3 hours ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.17
Broken Access Control vulnerability
5.3
3 hours ago
Booking and Rental Manager<= 2.7.7
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
WPKoi Templates for Elementor<= 3.7.2
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
@aborruso/ckan-mcp-server< 0.4.112
NPM: CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
6.5
5 hours ago