The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,630
Mitigations16,875
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
orval< 8.21.0
NPM: Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator
9.3
13 minutes ago
orval< 8.21.0
NPM: Orval: Import-time RCE via enum-typed default -> zod module-level template literal
9.3
19 minutes ago
orval< 8.21.0
NPM: Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli
9.3
21 minutes ago
orval< 8.21.0
NPM: Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client
9.3
31 minutes ago
liquidjs>= 10.26.0, < 10.27.1
NPM: LiquidJS has an infinite loop vulnerability in its `strip_html` filter
8.7
54 minutes ago
@openclaw/feishu< 2026.6.9-beta.1
NPM: OpenClaw Feishu permission tools could ignore per-account disablement
8.1
1 hour ago
@openclaw/feishu< 2026.6.9-beta.1
NPM: OpenClaw Feishu tools could ignore per-account disablement
8.1
1 hour ago
SureForms<= 2.12.5
Insecure Direct Object References (IDOR) vulnerability
5.3
1 hour ago
Ultimate Maps by Supsystic<= 1.5.3
Broken Access Control vulnerability
5.3
1 hour ago
KP Agent Ready<= 1.1.99
Sensitive Data Exposure vulnerability
5.3
1 hour ago
MountDev AI MCP Connector for WordPress<= 1.6.5
Broken Access Control vulnerability
6.5
1 hour ago
SEOPress<= 10.1
Server Side Request Forgery (SSRF) vulnerability
5.4
1 hour ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.17
Broken Access Control vulnerability
5.3
1 hour ago
Booking and Rental Manager<= 2.7.7
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
WPKoi Templates for Elementor<= 3.7.2
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
@aborruso/ckan-mcp-server< 0.4.112
NPM: CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
6.5
3 hours ago
@aborruso/ckan-mcp-server< 0.4.112
NPM: CKAN MCP Server: Information disclosure via verbose error reflection
3.7
3 hours ago
Shared Files Pro< 1.7.70
Unauthenticated Arbitrary File Read vulnerability
7.5
11 hours ago
Simple Ajax Chat< 20260827
Unauthenticated Stored XSS vulnerability
7.1
11 hours ago
FAQ Builder AYS1.6.3-1.8.4
Unauthenticated Stored XSS vulnerability
7.1
11 hours ago