The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total53,102
Mitigations17,346
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@nestjs/microservices< 11.2.5
NPM: Nest: Unbounded memory growth in the NestJS TCP microservice transport
6.5
14 minutes ago
EWWW Image Optimizer8.6.0-8.7.7
WordPress EWWW Image Optimizer plugin 8.6.0 - 8.7.7 - Author+ PHP Object Injection vulnerability
6.6
16 minutes ago
WP User Frontend2.5.8-4.3.11
Unauthenticated Account Creation with Registration Disabled vulnerability
5.3
16 minutes ago
FluentCart< 1.6.5
Unauthenticated Guest Customer Account Takeover vulnerability
6.5
16 minutes ago
Solace Extra< 1.7.2
Unauthenticated Non-Published Post Content Disclosure vulnerability
7.5
16 minutes ago
@nestjs/platform-fastify< 11.2.4
NPM: @nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets
7.4
17 minutes ago
nodemailer>= 9.1.0, <= 10.0.4
NPM: Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser)
7.5
18 minutes ago
Newsletter<= 9.3.9
Unauthenticated Insufficiently Protected Credentials vulnerability
5.3
1 hour ago
Premium Addons for Elementor<= 4.11.105
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
Qi Addons For Elementor<= 1.11
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
Happy Addons for Elementor<= 3.23.1
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
Flexible PDF Coupons<= 1.14.11
Insecure Direct Object References (IDOR) vulnerability
5.4
3 hours ago
Creator LMS<= 1.2.19
Other vulnerability Type vulnerability
5.4
3 hours ago
Business Directory<= 6.4.27
SQL Injection vulnerability
7.6
3 hours ago
User Submitted Posts<= 20260810
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
WP Activity Log<= 5.6.6
SQL Injection vulnerability
7.6
3 hours ago
Photo Gallery by Supsystic<= 1.21.0
Cross Site Request Forgery (CSRF) vulnerability
5.4
3 hours ago
Supreme Modules Lite<= 2.5.63
Cross Site Scripting (XSS) vulnerability
5.9
3 hours ago
King Addons for Elementor<= 51.1.86
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
MPG<= 4.2.3
Sensitive Data Exposure vulnerability
5.3
3 hours ago