The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,976
Mitigations18,238
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WP User Manager<= 2.9.25
Broken Access Control vulnerability
4.3
27 minutes ago
Bus Ticket Booking with Seat Reservation<= 5.9.7
Broken Access Control vulnerability
5.3
28 minutes ago
Rootblox<= 1.0.7
Cross Site Scripting (XSS) vulnerability
6.5
30 minutes ago
Booktics<= 1.0.30
Broken Access Control vulnerability
5.3
30 minutes ago
SureCart<= 4.9.5
Cross Site Scripting (XSS) vulnerability
6.5
31 minutes ago
VikRentCar<= 1.4.8
Cross Site Request Forgery (CSRF) vulnerability
8.8
32 minutes ago
Meta Box – WordPress Custom Fields Framework<= 5.15.2
Broken Access Control vulnerability
6.5
35 minutes ago
Seriously Simple Podcasting<= 3.17.0
Broken Access Control vulnerability
5.3
48 minutes ago
Seriously Simple Podcasting<= 3.17.0
Cross Site Scripting (XSS) vulnerability
6.5
48 minutes ago
@angular/router<= 19.2.25
NPM: @angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)
8.2
1 hour ago
hono>= 4.12.4, < 4.13.11
NPM: Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
5.3
1 hour ago
@angular/platform-server<= 19.2.25
NPM: @angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
5.1
1 hour ago
markdown-it< 14.3.2
NPM: markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes
7.5
1 hour ago
Brizy2.8.23
Cross Site Scripting (XSS) vulnerability
6.5
5 hours ago
DiviGear Carousel<= 5.2.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
8 hours ago
Document Gallery4.1-5.1.1
Unauthenticated Document Thumbnail Replacement vulnerability
5.3
8 hours ago
BDM Digital Payment Gateway1.2.7-1.3.12
Unauthenticated Payment Confirmation Forgery vulnerability
5.3
8 hours ago
Coinbase Commerce Payment Gateway for WooCommerce<= 1.4.1
Unauthenticated Webhook Signature Bypass vulnerability
5.3
8 hours ago
WP Photo Album Plus< 9.2.11.002
Reflected XSS vulnerability
7.1
9 hours ago
WP User Manager2.9-2.9.19
Unauthenticated Account Creation vulnerability
5.3
9 hours ago