The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total53,778
Mitigations17,720
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WordPress7.1-7.1.2
Unauthenticated Stored Cross-Site Scripting via Pending Comments (Comments administration screen) vulnerability
7.1
16 minutes ago
WordPress<= 7.1.2
Authenticated (Contributor+) Stored Cross-Site Scripting via Imgur oEmbed vulnerability
6.5
19 minutes ago
WordPress<= 7.1.2
Author+ Broken Access Control to Sticky Posts via REST API vulnerability
4.3
23 minutes ago
WordPress<= 7.1.2
Contributor+ DoS via infinite loop in WP_Http::make_absolute_url() vulnerability
4.3
26 minutes ago
WordPress<= 7.1.2
Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
6.9
36 minutes ago
Kirki<= 6.3.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
55 minutes ago
payload< 3.90.0
NPM: Payload didn't enforce field-level password update restrictions
7.6
1 hour ago
payload>= 3.0.0, < 3.90.0
NPM: Payload: ReDoS in Multipart Content-Type Validation
8.7
1 hour ago
payload>= 3.0.0, < 3.90.0
NPM: Payload vulnerable to API key disclosure through ordinary document reads
7.7
1 hour ago
@payloadcms/plugin-ecommerce< 3.90.0
NPM: Payload Ecommerce has an order confirmation validation issue
8.8
1 hour ago
payload< 3.90.0
NPM: Payload relationship-query authorization bypass
6.9
1 hour ago
payload>= 3.0.0, < 3.90.0
NPM: Payload: Token refresh and password reset responses may expose restricted user fields
7.1
1 hour ago
payload> 3.0.0, < 3.90.0
NPM: Payload: Field access control bypass on auth collections
9.3
1 hour ago
@payloadcms/plugin-stripe< 3.90.0
NPM: Payload: Insufficient Access Control in Stripe REST Proxy
6.4
2 hours ago
@payloadcms/plugin-mcp>= 3.61.0, < 3.88.0
NPM: Payload: Improper access control for MCP API keys
8.6
2 hours ago
@payloadcms/plugin-import-export>= 3.0.0, < 3.88.0
NPM: Payload: Prototype pollution in Payload Import Export plugin
9.3
2 hours ago
payload>= 3.0.0, < 3.88.0
NPM: Payload: SQL Injection in SQLite and Postgres
9.8
2 hours ago
@payloadcms/next>= 3.31.0, < 3.88.0
NPM: Payload: Untrusted redirect URL parameter exploit
6.1
2 hours ago
payload>= 3.40.0, < 3.88.0
NPM: Payload: Untrusted redirect URL parameter exploit
6.1
2 hours ago
payload>= 3.0.0, < 3.90.0
NPM: Payload: Polymorphic join queries could disclose hidden fields
7.1
2 hours ago