The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total57,033
Mitigations19,281
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@astrojs/solid-js>= 0.2.0, <= 7.1.1
npm: Astro: Reflected XSS via unescaped slot names in @astrojs/solid-js
2.3
26 minutes ago
@astrojs/svelte>= 5.7.3, <= 9.1.1
npm: Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
2.3
27 minutes ago
basic-ftp<= 6.2.2
npm: basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LF
5.9
37 minutes ago
basic-ftp<= 6.2.3
npm: basic-ftp: Uncaught TypeError in MLSD directory-listing parser via __proto__ fact name causes DoS in Client.list()
5.3
1 hour ago
@hono/node-server>= 2.0.0, < 2.1.6
npm: @hono/node-server: Unhandled `ECONNRESET` on the socket during an asynchronous WebSocket upgrade crashes the process
5.3
1 hour ago
@hono/node-server< 1.19.18
npm: @hono/node-server: Backslash in the request path is parsed as a path separator, bypassing path-based access control at a reverse proxy
5.3
1 hour ago
signalk-server< 2.31.0-beta.1
npm: Signal K Server: Buffered logs exposed to unauthenticated WebSocket clients
5.3
3 hours ago
Simple JWT Login<= 3.6.8
Cross Site Request Forgery (CSRF) vulnerability
8.8
15 hours ago
File Upload to Order< 1.1.4
Unauthenticated Arbitrary File Deletion vulnerability
10
15 hours ago
WP Remote Users Sync< 2.3.0
Privilege Escalation to Administrator vulnerability
7.5
15 hours ago
VibeBP<= 1.9.9.8.1
Authenticated (Subscriber+) Privilege Escalation in set_email_notification_settings() vulnerability
8.8
15 hours ago
TI WooCommerce Wishlist< 2.0.7
Unauthenticated SQLi vulnerability
9.3
15 hours ago
User Verification< 2.0.49
Unauthenticated Account Takeover vulnerability
8.1
15 hours ago
Descope< 1.2.0
Unauthenticated Account Takeover vulnerability
9.8
15 hours ago
CourseCure Courses<= 1.5.1
Authenticated (Subscriber+) Privilege Escalation to 'ajax_save_settings' Endpoint vulnerability
8.8
15 hours ago
Masterstudy<= 4.8.151
WordPress Masterstudy - Education WordPress Theme theme <= 4.8.151 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
15 hours ago
Clockinator Lite< 1.1.0
Unauthenticated SQLi vulnerability
9.3
15 hours ago
Ultimate Addons for Elementor Forms< 1.0.8
Unauthenticated Arbitrary File Upload vulnerability
10
15 hours ago
Mine CloudVod< 2.6.6
Unauthenticated Cloud Storage Credential Disclosure vulnerability
6.5
15 hours ago
ContentPen< 1.1.1
Unauthenticated Stored XSS vulnerability
7.1
15 hours ago