The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,221
Mitigations18,299
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
astro>= 7.1.0, <= 7.3.2
NPM: Astro: Arbitrary CSS injection in Astro View Transitions
2.3
6 minutes ago
@graphql-tools/utils>= 10.10.1, <= 12.0.1
NPM: GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments
8.4
7 minutes ago
dompurify>= 3.4.4, <= 3.4.16
NPM: DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes
9.2
10 minutes ago
dompurify<= 3.4.16
NPM: DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)
7.6
10 minutes ago
dompurify<= 3.4.16
NPM: DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml
0
11 minutes ago
ip-address<= 10.7.3
NPM: ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process
6.3
16 minutes ago
next>= 16.3.0, < 16.3.8
NPM: next.js cache leak across root param values in nested 'use cache' functions
6.3
27 minutes ago
nodemailer>= 3.0.0, <= 10.0.9
NPM: Nodemailer: Quadratic (O(n^2)) DKIM header unfolding lets a large folded header cause remote denial of service during signing
6.5
28 minutes ago
@sentry/nextjs>= 9.36.0, < 9.47.2
NPM: Sentry-Javascript: Middleware Bypass when using Tunnel route
9.1
40 minutes ago
next>= 10.0.0, <= 15.5.27
NPM: Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used
9.5
42 minutes ago
next>= 13.0.0, <= 15.5.27
NPM: Next.js: Denial of Service in App Router using Server Actions
8.2
45 minutes ago
stream-json>= 2.0.0, <= 3.6.0
NPM: stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service
6.2
45 minutes ago
Extensions for Leaflet Map<= 6.0
Cross Site Scripting (XSS) vulnerability
6.5
7 hours ago
ND Shortcodes For Visual Composer<= 7.8
Cross Site Scripting (XSS) vulnerability
6.5
7 hours ago
Waitlist Woocommerce ( Back in stock notifier )<= 2.9.1
Cross Site Scripting (XSS) vulnerability
6.5
7 hours ago
Restaurant Menu – Food Ordering System – Table Reservation<= 2.4.4
Cross Site Scripting (XSS) vulnerability
6.5
7 hours ago
ЮKassa для WooCommerce<= 2.17.3
Broken Access Control vulnerability
5.3
7 hours ago
ShopMagic<= 4.9.1
Sensitive Data Exposure vulnerability
5.3
7 hours ago
Majestic Support<= 1.2.1
Broken Access Control vulnerability
5.3
7 hours ago
Page Restriction WordPress (WP)<= 1.6.0
Broken Access Control vulnerability
5.3
7 hours ago