The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,716
Mitigations17,195
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
9router<= 0.5.2
NPM: 9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade
8.7
25 minutes ago
9router<= 0.5.2
NPM: 9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
6.4
25 minutes ago
9router<= 0.4.80
NPM: 9router: Image prefetch DNS rebinding allows SSRF to internal services
7.4
25 minutes ago
9router<= 0.4.80
NPM: 9router /v1 APIs has unauthenticated access via reverse proxy locality collapse
8.3
25 minutes ago
Safe SVG<= 2.5.0
Insecure Direct Object References (IDOR) vulnerability
4.3
1 hour ago
Estatik<= 4.3.5
SQL Injection vulnerability
7.6
1 hour ago
Safe SVG<= 2.5.0
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
Gutenberg Blocks by Kadence Blocks<= 3.7.11
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
SiteSkite<= 2.1.7
Insecure Direct Object References (IDOR) vulnerability
4.3
1 hour ago
Team<= 6.0.0
Insecure Direct Object References (IDOR) vulnerability
5.3
1 hour ago
JetTricks<= 2.0.1
Cross Site Scripting (XSS) vulnerability
6.5
1 hour ago
AI Engine<= 3.7.8
Insecure Direct Object References (IDOR) vulnerability
5.3
2 hours ago
PublishPress Capabilities<= 2.50.1
Cross Site Request Forgery (CSRF) vulnerability
8.1
2 hours ago
The Post Grid<= 7.9.5
Cross Site Scripting (XSS) vulnerability
6.5
3 hours ago
Premium Addons for Elementor<= 4.11.105
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago
ElementsKit Elementor addons Lite<= 4.0.5
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago
Import and export users and customers<= 2.4.17
Authenticated (Subscriber+) Privilege Escalation vulnerability
8.8
4 hours ago
Paytium<= 5.0.3
Unauthenticated Privilege Escalation vulnerability
9.8
4 hours ago
Podcast Importer SecondLine<= 1.5.6
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago
Ocean Extra<= 2.6.1
Cross Site Scripting (XSS) vulnerability
6.5
4 hours ago