The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,627
Mitigations16,875
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
orval< 8.21.0
NPM: Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client
9.3
17 minutes ago
liquidjs>= 10.26.0, < 10.27.1
NPM: LiquidJS has an infinite loop vulnerability in its `strip_html` filter
8.7
40 minutes ago
@openclaw/feishu< 2026.6.9-beta.1
NPM: OpenClaw Feishu permission tools could ignore per-account disablement
8.1
53 minutes ago
@openclaw/feishu< 2026.6.9-beta.1
NPM: OpenClaw Feishu tools could ignore per-account disablement
8.1
55 minutes ago
SureForms<= 2.12.5
Insecure Direct Object References (IDOR) vulnerability
5.3
1 hour ago
Ultimate Maps by Supsystic<= 1.5.3
Broken Access Control vulnerability
5.3
1 hour ago
KP Agent Ready<= 1.1.99
Sensitive Data Exposure vulnerability
5.3
1 hour ago
MountDev AI MCP Connector for WordPress<= 1.6.5
Broken Access Control vulnerability
6.5
1 hour ago
SEOPress<= 10.1
Server Side Request Forgery (SSRF) vulnerability
5.4
1 hour ago
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<= 2.0.17
Broken Access Control vulnerability
5.3
1 hour ago
Booking and Rental Manager<= 2.7.7
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
WPKoi Templates for Elementor<= 3.7.2
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
@aborruso/ckan-mcp-server< 0.4.112
NPM: CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
6.5
3 hours ago
@aborruso/ckan-mcp-server< 0.4.112
NPM: CKAN MCP Server: Information disclosure via verbose error reflection
3.7
3 hours ago
Shared Files Pro< 1.7.70
Unauthenticated Arbitrary File Read vulnerability
7.5
10 hours ago
Simple Ajax Chat< 20260827
Unauthenticated Stored XSS vulnerability
7.1
11 hours ago
FAQ Builder AYS1.6.3-1.8.4
Unauthenticated Stored XSS vulnerability
7.1
11 hours ago
Theme My Login7.0-7.1.15
Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation vulnerability
5.4
11 hours ago
RegistrationMagic< 6.0.9.9
Unauthenticated Stored XSS vulnerability
7.1
11 hours ago
Rank Math SEO< 1.0.277
Author+ Robots and Pillar Content Meta Update on Non-Owned Objects vulnerability
2.7
11 hours ago