The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,963
Mitigations16,968
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@openhop/server<= 0.3.5
NPM: @openhop/server: Path Traversal in Flow ID File Operations
8.3
6 hours ago
functype-mcp-server<= 1.4.3
NPM: functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import
7.8
6 hours ago
@yeger/turbo-graph<= 2.8.8
NPM: @yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run
8.8
6 hours ago
nuxt-ollama>= 1.2.26, < 1.3.1
NPM: Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients
7.5
6 hours ago
Aruba HiSpeed Cache<= 3.0.14
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
9 hours ago
smol-toml<= 1.7.0
NPM: smol-toml: Denial of Service via malformed TOML documents
8.2
12 hours ago
Easy Google Fonts<= 2.0.4
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
6.5
15 hours ago
Advanced Contact form 7 DB<= 2.1.3
Missing Authorization to Authenticated (Custom+) Unauthorized Data Import vulnerability
4.3
15 hours ago
WP BackItUp<= 2.1.0
Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability
4.9
15 hours ago
Builderall Builder for WordPress<= 3.0.2
Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification vulnerability
4.3
15 hours ago
Builderall Builder for WordPress<= 3.0.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
15 hours ago
Builderall Builder for WordPress<= 3.0.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
15 hours ago
Brevo<= 3.1.77
Reflected Cross-Site Scripting vulnerability
7.1
16 hours ago
TelSender<= 1.14.14
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
16 hours ago
Podlove Podcast Publisher<= 4.5.1
Arbitrary File Upload vulnerability
N/A
16 hours ago
Drag and Drop File Upload for Elementor Forms<= 1.6.0
Unauthenticated Arbitrary File Upload via 'type' Parameter vulnerability
10
16 hours ago
SlideShowPro SC<= 1.0.2
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
16 hours ago
CI HUB Connector<= 1.2.106
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
16 hours ago
Inquiry Cart<= 3.4.2
Cross-Site Request Forgery vulnerability
6.1
16 hours ago
Gallagher Website Design<= 2.6.4
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
6.5
16 hours ago