The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,744
Mitigations19,212
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@anthropic-ai/claude-code< 2.1.251
npm: Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace
7.7
1 hour ago
moleculer< 0.14.36
npm: Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser
7.5
1 hour ago
@tsparticles/mcp-server< 4.3.2
npm: tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients
6.9
2 hours ago
@tsparticles/mcp-server<= 4.3.0
npm: tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process
8.7
2 hours ago
@tsparticles/mcp-server< 4.3.1
npm: tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS
7.5
2 hours ago
ag-psd<= 31.0.0
npm: ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)
7.5
2 hours ago
isomorphic-git<= 1.38.5
npm: isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout
5.3
3 hours ago
isomorphic-git<= 1.38.5
npm: isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)
4.3
3 hours ago
isomorphic-git<= 1.38.5
npm: isomorphic-git: Arbitrary file write outside of working tree via directory symlink during checkout (potential RCE)
8.8
3 hours ago
Fusion Builder<= 3.16.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
3 hours ago
ARMember Premium<= 7.8.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Ultimate Addons for Contact Form 7<= 3.5.54
Unauthenticated Arbitrary File Read vulnerability
7.5
4 hours ago
Multilingual CMS<= 4.9.7
Unauthenticated Authentication Bypass in Language-per-Domain SSO vulnerability
8.1
4 hours ago
Extend B2B - Companies and Users Management for WooCommerce<= 2.1.4
WordPress Extend B2B - Companies and Users Management for WooCommerce plugin <= 2.1.4 - Unauthenticated Sensitive Information Exposure in /wp/v2/aio_company REST Endpoint vulnerability
5.3
7 hours ago
JWT Auth<= 3.0.2
Unauthenticated Account Access Persistence vulnerability
8.1
11 hours ago
FraudLabs Pro SMS Verification1.11.2-1.12.1
Unauthenticated SMS Verification Bypass vulnerability
5.3
11 hours ago
Confection WordPress Cable0.4.0-0.4.7
Unauthenticated RCE vulnerability
10
11 hours ago
WP Duplicate<= 1.1.11
Unauthenticated Arbitrary File Upload vulnerability
10
13 hours ago
Userplace<= 1.2.0
Unauthenticated Privilege Escalation vulnerability
9.8
13 hours ago
Ecommerce Affiliate<= 1.0.0
Unauthenticated Account Takeover vulnerability
8.1
13 hours ago