The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,311
Mitigations16,260
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
AIWU<= 1.5.6
Unauthenticated Privilege Escalation vulnerability
9.8
7 minutes ago
TrueBooker<= 1.2.3
Missing Authorization to Unauthenticated Arbitrary Password Reset vulnerability
9.8
12 minutes ago
Kirki<= 6.2.0
Freeform Page Builder, Website Builder & Customizer plugin <= 6.2.0 - Freeform Page Builder, Website Builder & Customizer <= 6.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
15 hours ago
WP Umbrella2.24.2-2.26.2
Cross Site Request Forgery (CSRF) vulnerability
5.4
20 hours ago
SiteGuard WP Plugin<= 1.8.6
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
crypto-js< 4.0.0
NPM: crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
9
3 days ago
hono>= 3.8.0, < 4.12.34
NPM: Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
4.8
3 days ago
hono>= 4.7.0, < 4.12.34
NPM: Hono: Proxy Helper does not remove response headers listed in the `Connection` header
3.7
3 days ago
hono>= 4.12.0, < 4.12.34
NPM: Hono: Algorithmic Complexity DoS in Language Middleware
5.3
3 days ago
jsii-diff< 1.131.0
NPM: jsii-diff: Command Injection via npm: package argument
7.8
3 days ago
@sveltejs/kit<= 2.70.1
NPM: SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header
5.3
3 days ago
nuxt>= 3.21.7, < 3.21.10
NPM: Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint
5.3
3 days ago
dompurify<= 3.4.12
NPM: DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
5.1
3 days ago
AfterShip Tracking<= 1.18.1
Cross Site Scripting (XSS) vulnerability
6.5
3 days ago
SMEPay: UPI Gateway for WooCommerce<= 1.0.5
Payment Bypass vulnerability
7.5
3 days ago
AI for SEO<= 2.4.2
Broken Access Control vulnerability
6.5
3 days ago
RealPress<= 1.1.2
SQL Injection vulnerability
9.3
3 days ago
Profile Extra Fields by BestWebSoft<= 1.3.4
Cross Site Scripting (XSS) vulnerability
6.5
3 days ago
ReactPress<= 3.4.0
Broken Access Control vulnerability
6
3 days ago
WP Social Avatar<= 1.5
Broken Access Control vulnerability
6.5
3 days ago