The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,373
Mitigations16,786
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
mariadb< 3.2.4
NPM: MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets
6.5
1 day ago
mariadb< 3.2.4
NPM: MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials
5.9
2 days ago
mariadb< 3.2.4
NPM: MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`
7.5
2 days ago
9router< 0.5.2
NPM: 9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF
8.2
2 days ago
9router< 0.5.2
NPM: 9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass
8.6
2 days ago
WP Data Access<= 5.5.81
SQL Injection vulnerability
9.3
2 days ago
Fluent Forms Pro Add On Pack<= 6.2.12
Broken Access Control vulnerability
7.5
2 days ago
Fluent Forms Pro Add On Pack<= 6.2.12
Privilege Escalation vulnerability
7.5
2 days ago
LeadConnector<= 4.0.5
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
SliceWP<= 1.2.10
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
RegistrationMagic<= 6.0.9.8
Broken Authentication vulnerability
7.4
2 days ago
Smart Marketing SMS and Newsletters Forms<= 5.1.24
SQL Injection vulnerability
9.3
2 days ago
OwnerRez API<= 1.2.6
Broken Access Control vulnerability
6.3
2 days ago
Booking and Rental Manager<= 2.7.6
Broken Access Control vulnerability
6.5
2 days ago
Tickera<= 3.6.0.2
PHP Object Injection vulnerability
9.8
2 days ago
Email Essentials<= 6.0.6
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
Tailored Tools<= 3.0.2
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
Super Store Finder<= 7.10
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
SiteGround Security<= 1.6.6
2FA Bypass vulnerability
8.1
2 days ago
WordPress Social Login and Register<= 7.8.2
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago