The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,182
Mitigations16,181
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
undici< 6.28.0
NPM: undici vulnerable to CRLF Injection via blob-like body 'type' property
4.2
21 minutes ago
undici>= 7.0.0, < 7.29.0
NPM: undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives
5.9
23 minutes ago
undici< 6.28.0
NPM: undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
4.8
24 minutes ago
undici< 6.28.0
NPM: undici vulnerable to downstream response desynchronization via retry interceptor
4.8
30 minutes ago
undici>= 7.0.0, < 7.29.0
NPM: undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
7.4
35 minutes ago
fast-uri< 2.4.4
NPM: fast-uri vulnerable to host confusion via backslash authority introducer
7.5
38 minutes ago
socket.io-parser< 3.3.6
NPM: Socket.IO: Zero-attachment Memory Exhaustion
7.5
45 minutes ago
postcss<= 8.5.22
NPM: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
6.3
2 hours ago
brace-expansion< 1.1.18
NPM: brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation
7.5
3 hours ago
@angular/core<= 19.2.25
NPM: Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
7.6
3 hours ago
@angular/compiler<= 19.2.25
NPM: Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
7.6
3 hours ago
@angular/platform-server<= 19.2.25
NPM: Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
8.6
3 hours ago
@angular/common<= 19.2.25
NPM: Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
8.8
3 hours ago
VikBooking Hotel Booking Engine & PMS<= 1.8.13
Reflected Cross-Site Scripting vulnerability
7.1
7 hours ago
WPify Woo Czech<= 5.4.16
Authenticated (Shop Manager+) Privilege Escalation vulnerability
7.2
7 hours ago
Checkout Field Editor for WooCommerce (Pro)<= 3.7.7
Authenticated (Subscriber+) Path Traversal to Arbitrary File Read vulnerability
6.5
7 hours ago
Nexter Blocks<= 5.0.0
Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion vulnerability
4.3
8 hours ago
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart<= 2.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
8 hours ago
VikBooking Hotel Booking Engine & PMS<= 1.8.13
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
8 hours ago
Paid Memberships Pro<= 3.8.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
8 hours ago