The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,282
Mitigations18,329
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
obsidian-tc>= 1.0.1, <= 1.31.3
npm: obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes
7.1
18 minutes ago
obsidian-tc< 1.3.1
npm: obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopback
9.6
36 minutes ago
obsidian-tc< 1.3.1
npm: obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields
4.3
37 minutes ago
obsidian-tc>= 1.13.0, <= 1.31.3
npm: obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP
7.1
1 hour ago
obsidian-tc< 1.3.1
npm: obsidian-tc tokens can access arbitrary configured vaults
9.9
1 hour ago
obsidian-tc< 1.3.1
npm: obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are readable by default
6.5
1 hour ago
obsidian-tc< 1.3.1
npm: obsidian-tc : Symlink read-ACL scope bypass via lexical path checks
4.7
1 hour ago
Depicter Slider4.0.5-4.8.1
Editor+ Arbitrary File Upload vulnerability
9.1
10 hours ago
Otter - Gutenberg Block< 3.2.8
Unauthenticated Stored XSS vulnerability
7.1
10 hours ago
Spam protection, AntiSpam, FireWall by CleanTalk<= 6.89.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
10 hours ago
WebP Express< 0.25.16
Unauthenticated Stored XSS vulnerability
7.1
11 hours ago
Royal MCP< 1.5.7
Authentication Bypass vulnerability
7.5
11 hours ago
LiteSpeed Cache< 7.9.2
Unauthenticated Stored XSS vulnerability
7.5
11 hours ago
LiteSpeed Cache< 7.9.2
Unauthenticated Stored XSS vulnerability
7.5
11 hours ago
Advanced Custom Fields: Extended PRO0.9.2.7
Unauthenticated Non-Administrator Account Takeover vulnerability
8.1
11 hours ago
ACF Extended0.9.2.7
Unauthenticated Non-Administrator Account Takeover vulnerability
8.1
11 hours ago
Advanced Custom Fields: Extended PRO0.9.2.7
Unauthenticated Administrator Account Takeover vulnerability
8.1
11 hours ago
Advanced Custom Fields: Extended PRO< 0.9.2.8
Unauthenticated RCE vulnerability
9
11 hours ago
ACF Extended< 0.9.2.8
Unauthenticated RCE vulnerability
9
11 hours ago
ACF Extended0.9.2.7
Unauthenticated Administrator Account Takeover vulnerability
8.1
12 hours ago