The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,411
Mitigations16,337
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Welcart e-Commerce< 2.11.34
Author+ Stored XSS via Product Name vulnerability
5.9
Just now
Cookie Consent – GDPR & CCPA Cookie Banner & Consent Manager< 0.0.10
Subscriber+ Consent Settings Update and Consent Log Disclosure vulnerability
5.4
2 minutes ago
Patterns Kit<= 1.0.3
Contributor+ Stored XSS via YouTube Popup Link vulnerability
6.5
4 minutes ago
Import WP< 2.14.23
Unauthenticated Sensitive Information Exposure via Export File Download vulnerability
5.3
6 minutes ago
WP Crowdfunding< 2.2.1
Subscriber+ Campaign Creation via Missing Authorization vulnerability
4.3
6 minutes ago
WP Crowdfunding< 2.2.1
Subscriber+ Campaign Update Modification via IDOR vulnerability
4.3
41 minutes ago
@trigger.dev/core>= 3.3.8, <= 4.5.5
NPM: Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
8.5
10 hours ago
hashi-vault-js<= 0.5.1
NPM: hashi-vault-js: Vault token and secret values exposed in thrown errors
0
17 hours ago
ep_etherpad-lite>= 2.6.0, <= 3.0.0
NPM: ep_etherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token
6.8
17 hours ago
ep_etherpad-lite<= 3.0.0
NPM: ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
4.2
17 hours ago
ep_etherpad-lite>= 2.1.0, <= 3.0.0
NPM: ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header
6.1
17 hours ago
User Registration<= 5.2.6
Broken Access Control vulnerability
5.3
18 hours ago
InstaWP Connect<= 0.1.3.7
Broken Access Control vulnerability
5.3
21 hours ago
WP Event SOlution< 4.1.20
Unauthenticated Account Creation via Waiting List Endpoint vulnerability
5.3
1 day ago
KiviCare< 4.5.2
Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOR vulnerability
6.5
1 day ago
WP Event SOlution< 4.1.20
Contributor+ Order Information Disclosure via IDOR vulnerability
4.3
1 day ago
WP Event SOlution< 4.1.20
Contributor+ Customer PII Disclosure via REST API vulnerability
4.3
1 day ago
LearnPress< 4.4.4
Subscriber+ Sensitive Information Exposure via AI Assistant vulnerability
4.3
1 day ago
Tourmaster< 5.4.8
Stored XSS vulnerability
7.1
1 day ago
WP Photo Album Plus< 9.2.04.003
Subscriber+ Stored XSS vulnerability
6.5
1 day ago