The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,471
Mitigations18,464
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
Pie Register Premium<= 3.8.4.0
Unauthenticated Arbitrary File Upload vulnerability
9.8
20 minutes ago
yootheme5.0.0-5.0.52
Unauthenticated Arbitrary File Upload vulnerability
9.8
29 minutes ago
Ultimate Member<= 2.14.0
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.4
31 minutes ago
JupiterX Core<= 4.61.0
Unauthenticated Authentication Bypass vulnerability
9.8
39 minutes ago
affiliate-toolkit<= 3.9.2
Authenticated (Contributor+) Arbitrary File Upload vulnerability
7.5
39 minutes ago
Appointment Booking Calendar<= 1.4.05
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
41 minutes ago
Animated Text Block<= 1.2.6
Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability
7.5
46 minutes ago
qs>= 6.7.0, <= 6.16.0
npm: qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
5.3
2 hours ago
undici>= 8.11.0, < 8.11.2
npm: undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
7.5
2 hours ago
Newsletters<= 4.18.2
Cross Site Request Forgery (CSRF) vulnerability
9.6
2 hours ago
AI Engine<= 3.8.4
Authenticated (Subscriber+) Limited Media File Deletion vulnerability
4.2
2 hours ago
affiliate-toolkit<= 3.9.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
AMP for WP<= 1.1.17
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot<= 1.2.8
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
2 hours ago
AI Alt Text Generator<= 2.7.0
Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'post_id' Parameter vulnerability
5.3
2 hours ago
better-auth>= 1.6.17, < 1.7.7
npm: @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
3.7
2 hours ago
@better-auth/kysely-adapter>= 1.6.17, < 1.7.0
npm: @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
3.7
2 hours ago
@better-auth/drizzle-adapter>= 1.6.17, < 1.7.7
npm: @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
3.7
2 hours ago
better-auth>= 1.5.0-beta.12, < 1.7.7
npm: better-auth: OAuth Proxy lets an attacker sign in as another user
7.4
2 hours ago
better-auth>= 1.4.0-beta.18, < 1.7.7
npm: better-auth: OAuth state can be used as a Magic Link to sign in as another user
9.1
2 hours ago