The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,373
Mitigations16,786
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
mariadb< 3.2.4
NPM: MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets
6.5
1 day ago
mariadb< 3.2.4
NPM: MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials
5.9
1 day ago
mariadb< 3.2.4
NPM: MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`
7.5
1 day ago
9router< 0.5.2
NPM: 9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF
8.2
1 day ago
9router< 0.5.2
NPM: 9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass
8.6
1 day ago
OwnerRez API<= 1.2.6
Broken Access Control vulnerability
6.3
2 days ago
Booking and Rental Manager<= 2.7.6
Broken Access Control vulnerability
6.5
2 days ago
Tickera<= 3.6.0.2
PHP Object Injection vulnerability
9.8
2 days ago
Email Essentials<= 6.0.6
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
Tailored Tools<= 3.0.2
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
Super Store Finder<= 7.10
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
SiteGround Security<= 1.6.6
2FA Bypass vulnerability
8.1
2 days ago
WordPress Social Login and Register<= 7.8.2
Cross Site Scripting (XSS) vulnerability
7.1
2 days ago
Newspapers X1.0.46-1.0.48
Backdoor vulnerability
10
2 days ago
Hash Form<= 1.4.2
Arbitrary File Upload vulnerability
10
2 days ago
Forminator< 1.57.0.7
Authenticated Privilege Escalation vulnerability
9.8
2 days ago
Amelia9.0-9.7
Provider+ Arbitrary Provider Password Update vulnerability
4.7
2 days ago
Events Manager<= 7.4.0.1
Reflected Cross-Site Scripting via 'header_format' Parameter vulnerability
7.1
2 days ago
All-in-One WP Migration Unlimited Extension<= 2.84
Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter vulnerability
6.5
2 days ago
Return Refund and Exchange For WooCommerce< 4.6.4
Unauthenticated Guest Order Message Disclosure and Manipulation vulnerability
6.5
2 days ago