The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,530
Mitigations18,489
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Customer Email Verification for WooCommerce<= 2.8.2
Unauthenticated Authentication Bypass vulnerability
4.8
39 minutes ago
Lumise Product Designer<= 2.1.2
Unauthenticated Arbitrary File Read vulnerability
7.5
55 minutes ago
dd-trace>= 2.0.0, < 5.131.1
npm: dd-trace: ReDOS in URL query string obfuscation
8.7
10 hours ago
tinymce7.9.3
npm: TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
8.5
10 hours ago
@ckeditor/ckeditor5-engine>= 29.0.0, < 47.7.4
npm: CKEditor: Cross-site scripting (XSS) in the engine package
3.1
10 hours ago
ckeditor5>= 29.0.0, < 47.7.4
npm: CKEditor: Cross-site scripting (XSS) in the engine package
3.1
10 hours ago
@ckeditor/ckeditor5-engine>= 45.0.0, < 47.7.4
npm: CKEditor: Cross-site scripting (XSS) in the engine package
8.1
10 hours ago
ckeditor5>= 45.0.0, < 47.7.4
npm: CKEditor: Cross-site scripting (XSS) in the engine package
8.1
10 hours ago
undici>= 7.0.0, < 7.30.1
npm: undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
7.4
12 hours ago
undici>= 4.0.0, < 6.29.1
npm: undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
7.4
12 hours ago
undici>= 4.2.1, < 6.29.1
npm: undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation
7.5
12 hours ago
undici>= 5.15.0, < 6.29.1
npm: undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering
5.9
12 hours ago
undici>= 7.15.0, < 7.30.1
npm: undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
5.9
12 hours ago
@modelcontextprotocol/hono>= 2.0.0, < 2.0.1
npm: MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
7.5
12 hours ago
@modelcontextprotocol/node>= 2.0.0, < 2.1.0
npm: MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
7.5
12 hours ago
@modelcontextprotocol/server>= 2.0.0, < 2.1.0
npm: MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
7.5
12 hours ago
@modelcontextprotocol/sdk>= 1.10.0, < 1.30.1
npm: MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
7.5
12 hours ago
Awesome Support<= 6.4.1
Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
6.5
13 hours ago
If-So Dynamic Content Personalization<= 1.10.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
13 hours ago
ChatBot for eCommerce &#8211; WoowBot<= 5.0.0
Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification vulnerability
4.3
13 hours ago