The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,278
Mitigations18,329
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
obsidian-tc>= 1.13.0, <= 1.31.3
npm: obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP
7.1
39 minutes ago
obsidian-tc< 1.3.1
npm: obsidian-tc tokens can access arbitrary configured vaults
9.9
40 minutes ago
obsidian-tc< 1.3.1
npm: obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are readable by default
6.5
40 minutes ago
obsidian-tc< 1.3.1
npm: obsidian-tc : Symlink read-ACL scope bypass via lexical path checks
4.7
41 minutes ago
Depicter Slider4.0.5-4.8.1
Editor+ Arbitrary File Upload vulnerability
9.1
9 hours ago
Otter - Gutenberg Block< 3.2.8
Unauthenticated Stored XSS vulnerability
7.1
9 hours ago
Spam protection, AntiSpam, FireWall by CleanTalk<= 6.89.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
10 hours ago
WebP Express< 0.25.16
Unauthenticated Stored XSS vulnerability
7.1
10 hours ago
Royal MCP< 1.5.7
Authentication Bypass vulnerability
7.5
10 hours ago
LiteSpeed Cache< 7.9.2
Unauthenticated Stored XSS vulnerability
7.5
10 hours ago
LiteSpeed Cache< 7.9.2
Unauthenticated Stored XSS vulnerability
7.5
10 hours ago
Advanced Custom Fields: Extended PRO0.9.2.7
Unauthenticated Non-Administrator Account Takeover vulnerability
8.1
10 hours ago
ACF Extended0.9.2.7
Unauthenticated Non-Administrator Account Takeover vulnerability
8.1
10 hours ago
Advanced Custom Fields: Extended PRO0.9.2.7
Unauthenticated Administrator Account Takeover vulnerability
8.1
10 hours ago
Advanced Custom Fields: Extended PRO< 0.9.2.8
Unauthenticated RCE vulnerability
9
11 hours ago
ACF Extended< 0.9.2.8
Unauthenticated RCE vulnerability
9
11 hours ago
ACF Extended0.9.2.7
Unauthenticated Administrator Account Takeover vulnerability
8.1
11 hours ago
Music Store<= 1.4.7
Unauthenticated Arbitrary File Read vulnerability
7.5
11 hours ago
PixelYourSite PRO< 12.6.8
Unauthenticated Stored XSS vulnerability
7.1
11 hours ago
PixelYourSite – Your smart PIXEL (TAG) Manager< 11.4.3
Unauthenticated Stored XSS vulnerability
7.1
11 hours ago