The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,574
Mitigations17,172
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@sync-in/server<= 2.3.0
NPM: @sync-in/server vulnerable to TOTP Brute-Force via `POST /api/app/sync/register`
6.8
11 minutes ago
@roomi-fields/notebooklm-mcp>= 1.6.0, < 2.0.3
NPM: @roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory
7.1
13 minutes ago
Ninja Forms<= 3.15.3
Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
WP Yelp Review Slider<= 9.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
CTX Feed<= 6.6.43
Authenticated (Shop Manager+) Path Traversal to File Deletion vulnerability
4.9
1 hour ago
TranslatePress<= 3.3.5
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 hour ago
Booking Calendar<= 11.8.3
Reflected Cross-Site Scripting vulnerability
7.1
2 hours ago
GiveWP< 4.16.9
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
2 hours ago
Payment Gateway for PayPal on WooCommerce< 9.2.1
Unauthenticated Payment Bypass vulnerability
5.3
2 hours ago
Meow Gallery< 5.5.5
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
2 hours ago
Forminator< 1.57.2.1
Authenticated Privilege Escalation vulnerability
6.6
2 hours ago
Forminator< 1.57.2.1
Authenticated RCE vulnerability
8.5
2 hours ago
Redux Framework<= 4.5.13
Authenticated (Subscriber+) Cross-Site Scripting vulnerability
6.5
2 hours ago
NextGEN Gallery< 4.5.0
Authenticated Arbitrary File Upload vulnerability
9.1
3 hours ago
MC4WP<= 4.14.0
Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago
LiteSpeed Cache<= 7.9
Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago
AppMySite<= 3.15.3
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
Redux Framework<= 4.5.13
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
WP Customer Reviews<= 3.7.8
Reflected Cross-Site Scripting vulnerability
7.1
3 hours ago
WPGraphQL Smart Cache< 2.3.2
Unauthenticated Persisted Query Registration and Alias Squatting vulnerability
6.5
3 hours ago