The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total57,176
Mitigations19,331
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
astro<= 7.4.4
npm: Astro: XSS via attribute injection in dynamic tag names
2.3
15 minutes ago
astro>= 5.14.3, <= 7.4.6
npm: Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems
6.3
19 minutes ago
@astrojs/node<= 11.1.11
npm: Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems
6.3
19 minutes ago
@nuxt/schema>= 3.5.0, < 4.6.4
npm: Nuxt dev server serves files from a parent directory with a stray lockfile or workspace file
5.9
43 minutes ago
AutomatorWP Pro Webhooks<= 1.4.4
Missing Authorization to Unauthenticated Arbitrary User Password Reset / Account Takeover via Webhook with 'Is the user ID' Field vulnerability
9.8
2 hours ago
Optimole<= 4.2.19
Unauthenticated PHP Object Injection to Arbitrary File Deletion via 'comment_content'/'comment_agent' Parameter during Attachment Rename vulnerability
7.1
2 hours ago
Spectra<= 2.20.5
Sensitive Data Exposure vulnerability
5.3
4 hours ago
RepairBuddy<= 4.1236
Broken Access Control vulnerability
5.3
4 hours ago
Extension for Leaflet Map<= 6.1.1
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago
Church Admin<= 5.1.8
Broken Access Control vulnerability
5.3
4 hours ago
PowerPack Lite for Beaver Builder<= 1.3.2
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago
Imagify<= 2.3.4
Broken Access Control vulnerability
4.3
4 hours ago
Event Tickets<= 5.31.0
Broken Access Control vulnerability
5.3
4 hours ago
myCred<= 4.0.2
SQL Injection vulnerability
8.5
4 hours ago
myCred<= 4.0.2
Broken Access Control vulnerability
4.3
4 hours ago
myCred<= 4.0.2
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago
s2Member<= 261106
Content Injection vulnerability
5.3
4 hours ago
Slim SEO<= 4.11.5
Content Injection vulnerability
4.3
4 hours ago
MapSVG<= 9.0.4
Content Injection vulnerability
5.3
4 hours ago
JetTabs<= 2.3.5
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago