The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total54,774
Mitigations18,164
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@tanstack/vue-start>= 1.143.12, < 1.168.56
NPM: TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
9.3
16 minutes ago
@tanstack/solid-start>= 1.143.12, < 1.168.57
NPM: TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
9.3
16 minutes ago
@tanstack/react-start>= 1.143.12, < 1.168.60
NPM: TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
9.3
16 minutes ago
@tanstack/start-server-core>= 1.143.12, < 1.169.39
NPM: TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses
9.3
16 minutes ago
@anthropic-ai/claude-code< 2.1.179
NPM: Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
7.5
16 minutes ago
@qwik.dev/core< 2.0.0-beta37
NPM: Qwik: Crashing any Qwik Server via Resource thenable
8.7
16 minutes ago
@builder.io/qwik< 1.20.0
NPM: Qwik: Crashing any Qwik Server via Resource thenable
8.7
16 minutes ago
@backstage/backend-defaults< 0.17.8
NPM: Backstage: Improper access control in backend action invocation
4.3
16 minutes ago
@appium/support<= 7.2.5
NPM: Appium: Symlink based Zip Slip in @appium/support ZIP extraction
6.5
19 minutes ago
nuxt-og-image>= 6.2.5, < 6.7.0
NPM: Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes
6.9
22 minutes ago
@opennextjs/cloudflare>= 0.3.0, < 1.20.2
NPM: OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths
7.5
23 minutes ago
@adonisjs/http-server<= 8.2.1
NPM: AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
8.7
28 minutes ago
WPDM – Premium Packages<= 7.2.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
2 hours ago
Schema & Structured Data for WP & AMP<= 1.67
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
SiteOrigin CSS<= 1.6.7
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
2 hours ago
Infinite Uploads<= 3.4.1
Sensitive Data Exposure vulnerability
6.5
2 hours ago
PlanetStudio Payment Gateway<= 1.3.3
Broken Access Control vulnerability
5.3
2 hours ago
Presto Player<= 4.5.3
Cross Site Scripting (XSS) vulnerability
6.5
2 hours ago
Login with phone number<= 1.8.77
Broken Access Control vulnerability
4.3
2 hours ago
Ultimate Addons for Contact Form 7<= 3.5.54
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago