The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,966
Mitigations18,664
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
decode-uri-component<= 0.5.0
npm: decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs
8.2
25 minutes ago
vite6.4.4
npm: Vite: `server.fs.deny` bypassed with queries
6.9
27 minutes ago
@eeacms/volto-chatbot<= 2.0.3
npm: @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy
8.2
31 minutes ago
@cedar-policy/cedar-wasm>= 3.2.0, < 3.4.3
npm: Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence
2.1
32 minutes ago
@sylphx/pdf-reader-mcp>= 2.2.0, < 3.0.1
npm: @sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY
7.5
32 minutes ago
parse-server<= 8.6.83
npm: Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklist
2.1
33 minutes ago
Kirki<= 6.4.0
Content Injection vulnerability
4.3
2 hours ago
Document Library Lite<= 1.3.0
Sensitive Data Exposure vulnerability
5.3
2 hours ago
The Plus Addons for Elementor Page Builder Lite<= 6.5.3
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
Happy Addons for Elementor<= 3.50.1
Broken Access Control vulnerability
6.4
2 hours ago
WP ERP<= 1.17.10
Broken Access Control vulnerability
4.3
2 hours ago
EventPrime<= 4.3.6.0
Broken Access Control vulnerability
5.4
2 hours ago
Page Restriction WordPress (WP)<= 1.6.1
Broken Access Control vulnerability
5.3
2 hours ago
myCred<= 4.0.2
Broken Access Control vulnerability
5.3
2 hours ago
Flash & HTML5 Video<= 2.14.0
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
WPFunnels<= 3.13.5
Cross Site Request Forgery (CSRF) vulnerability
4.3
2 hours ago
Custom Price for WooCommerce<= 1.1.29
Broken Access Control vulnerability
5.3
2 hours ago
Kit (formerly ConvertKit)<= 3.4.7
Broken Access Control vulnerability
5.3
2 hours ago
Strong Testimonials<= 3.3.15
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
Profile Builder<= 4.0.5
Broken Access Control vulnerability
5.3
2 hours ago