The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,464
Mitigations18,438
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Newsletters<= 4.18.2
Cross Site Request Forgery (CSRF) vulnerability
9.6
16 minutes ago
AI Engine<= 3.8.4
Authenticated (Subscriber+) Limited Media File Deletion vulnerability
4.2
23 minutes ago
affiliate-toolkit<= 3.9.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
24 minutes ago
AMP for WP<= 1.1.17
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
24 minutes ago
AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot<= 1.2.8
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
24 minutes ago
AI Alt Text Generator<= 2.7.0
Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'post_id' Parameter vulnerability
5.3
28 minutes ago
better-auth>= 1.6.17, < 1.7.7
npm: @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
3.7
40 minutes ago
@better-auth/kysely-adapter>= 1.6.17, < 1.7.0
npm: @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
3.7
40 minutes ago
@better-auth/drizzle-adapter>= 1.6.17, < 1.7.7
npm: @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
3.7
40 minutes ago
better-auth>= 1.5.0-beta.12, < 1.7.7
npm: better-auth: OAuth Proxy lets an attacker sign in as another user
7.4
40 minutes ago
better-auth>= 1.4.0-beta.18, < 1.7.7
npm: better-auth: OAuth state can be used as a Magic Link to sign in as another user
9.1
40 minutes ago
nodemailer>= 3.0.0, <= 10.0.12
npm: Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service
5.9
1 hour ago
nodemailer>= 3.0.0, <= 10.0.12
npm: Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped
5.3
1 hour ago
nodemailer>= 3.0.0, <= 10.0.9
npm: Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service
5.9
1 hour ago
better-auth>= 1.3.8-beta.3, < 1.7.0-rc.3
npm: better-auth: Device login approval does not show the requesting client or permissions
8.1
1 hour ago
satori>= 0.0.27, < 0.33.5
npm: Satori-generated SVG has improper escaping
5.3
1 hour ago
ghost>= 5.9.0, < 6.44.1
npm: Ghost: Authorization Bypass in Comment Like Feature
6.5
1 hour ago
All-in-One Video Gallery<= 4.9.7
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
1 hour ago
dcmjs< 0.52.0
npm: dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS
0
2 hours ago
TiendaCrypto para WooCommerce1.0.1-1.2.1
Unauthenticated Order Payment Forgery vulnerability
3.7
5 hours ago