The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,328
Mitigations18,329
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
GiveWP< 4.19.0.1
Give Manager+ Path Traversal vulnerability
6
20 hours ago
GiveWP< 4.19.0.1
Unauthenticated Unpublished Donation Form Disclosure vulnerability
5.3
20 hours ago
WP Stripe Checkout< 1.2.2.62
Unauthenticated Forged Payment Completion vulnerability
5.3
20 hours ago
Contact Form by Supsystic< 1.8.0
Admin+ Stored XSS vulnerability
5.9
20 hours ago
WP VR8.5.49-9.0.2
Contributor+ Stored XSS vulnerability
6.5
1 day ago
GeoDirectory< 2.8.194
Unauthenticated Guest-Submitted Listing Modification vulnerability
3.7
1 day ago
GeoDirectory< 2.8.194
Admin+ RCE vulnerability
9.1
1 day ago
GeoDirectory< 2.8.194
Contributor+ Stored XSS vulnerability
6.5
1 day ago
GeoDirectory< 2.8.194
Unauthenticated Non-Public Listing Disclosure vulnerability
5.3
1 day ago
GeoDirectory< 2.8.194
Unauthenticated Non-Public Listing Disclosure vulnerability
5.3
1 day ago
GeoDirectory< 2.8.194
Subscriber+ Arbitrary Listing Image Modification vulnerability
4.3
1 day ago
Pixel Tag Manager for WooCommerce< 2.2.3
Contributor+ Stored XSS vulnerability
6.5
1 day ago
News Kit Elementor Addons<= 1.4.7
Subscriber+ Arbitrary Post Meta Update vulnerability
5.4
1 day ago
News Kit Elementor Addons< 1.4.9
Subscriber+ Plugin Installation and Activation vulnerability
4.3
1 day ago
Advanced Twenty Seventeen<= 1.3.1
Subscriber+ Site Theme Switch vulnerability
5.4
1 day ago
@azure/msal-node>= 5.0.0-beta.0, < 7.1.0
npm: MSAL Node authorization code flow may disclose parameters to an attacker-controlled endpoint
7.5
2 days ago
undici>= 6.23.0, < 6.29.1
npm: undici vulnerable to Denial of Service via unhandled error on excessive content-encodings
7.5
2 days ago
undici>= 6.5.0, < 6.29.1
npm: undici vulnerable to Denial of Service via unbounded memory in the EventSource parser
5.9
2 days ago
undici>= 7.15.0, < 7.30.1
npm: undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens
5.9
2 days ago
serialize-javascript< 7.1.3
npm: Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
2.1
2 days ago