The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

Total56,248
Mitigations19,001
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@enspirit/elo<= 1.0.0
npm: Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access
9.8
2 hours ago
@enspirit/elo<= 1.0.0
npm: Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
9.8
2 hours ago
@enspirit/elo<= 1.0.0
npm: Elo backends have code injection via unvalidated emission of programmatic AST fields
7.4
2 hours ago
ClickCease Click Fraud Protection<= 3.3.0
Broken Access Control vulnerability
5.3
3 hours ago
myCred<= 4.0.2
Broken Access Control vulnerability
4.3
3 hours ago
AnyWhere Elementor<= 1.3.0
Broken Access Control vulnerability
5.3
3 hours ago
Elementor Website Builder<= 4.3.5
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
myCred<= 4.0.2
Broken Access Control vulnerability
4.3
3 hours ago
AnyWhere Elementor<= 1.3.0
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
Dokan<= 5.3.2
Broken Access Control vulnerability
5.3
3 hours ago
WCFM Membership<= 2.12.0
Broken Access Control vulnerability
4.3
3 hours ago
Dokan<= 5.3.2
Broken Access Control vulnerability
5.3
3 hours ago
Posts Table with Search & Sort<= 1.4.14
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
AnyWhere Elementor<= 1.3.0
Sensitive Data Exposure vulnerability
6.5
3 hours ago
Forminator<= 1.58.3
Broken Access Control vulnerability
5.3
3 hours ago
Forminator<= 1.58.3
Content Injection vulnerability
4.3
3 hours ago
WCFM Membership<= 2.12.0
Broken Access Control vulnerability
5.3
3 hours ago
Uncanny Automator<= 7.7.1
Broken Access Control vulnerability
5.3
3 hours ago
Paid Member Subscriptions<= 3.1.3
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
Better Search<= 4.5.2
Broken Access Control vulnerability
5.3
3 hours ago