The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,839
Mitigations16,938
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
liquidjs<= 10.27.1
NPM: LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process
7.5
1 hour ago
csv-parse< 7.0.2
NPM: node-csv: Prototype replacement still reachable via columns path
6.9
1 hour ago
@swc/html< 1.15.47-nightly-20260729.1
NPM: SWC HTML minifier may allow script element breakout when minifying embedded JSON
6.1
1 hour ago
ilGhera Reviso Exporter for WooCommerce<= 1.2.3
Missing Authorization to Authenticated (Subscriber+) Agreement Grant Token Deletion via disconnect_callback Function vulnerability
4.3
2 hours ago
WPFunnels<= 3.12.13
Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation vulnerability
5.3
2 hours ago
Awesome Support<= 6.3.9
Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial vulnerability
4.3
2 hours ago
WP Recipe Maker<= 10.8.0
Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing vulnerability
4.3
2 hours ago
WP Event SOlution<= 4.1.17
Missing Authorization to Authenticated (Subscriber+) Notification Flow Management vulnerability
5.4
3 hours ago
WP Crowdfunding<= 2.2.1
Authenticated (Shop Manager+) SQL Injection vulnerability
4.9
4 hours ago
Podlove Podcast Publisher<= 4.5.5
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
Mail Mint<= 1.31.0
Authenticated (Custom+) SQL Injection vulnerability
8.5
4 hours ago
Ninja Forms<= 3.14.6
Authenticated (Administrator+) PHP Object Injection vulnerability
7.2
4 hours ago
My Calendar<= 3.8.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
5 hours ago
My Calendar<= 3.8.3
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
5 hours ago
WP Event SOlution<= 4.1.22
Authenticated (Custom+) Local File Inclusion vulnerability
7.5
5 hours ago
EDD Product Catalog Feed by PixelYourSite<= 1.0.2
Authenticated (Subscriber+) Arbitrary Options Deletion vulnerability
7.1
8 hours ago
JetFormBuilder< 3.6.5.2
Unauthenticated Arbitrary Shortcode Execution vulnerability
6.5
9 hours ago
B2BKing< 5.2.40
Unauthenticated B2B Group Assignment and Approval Bypass vulnerability
5.3
9 hours ago
Kirki6.2.1-6.2.5
Unauthenticated Stored XSS vulnerability
7.1
11 hours ago
SureCart< 4.7.0
Unauthenticated Account Creation with Automatic Login vulnerability
5.3
11 hours ago