The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,118
Mitigations18,278
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@apostrophecms/import-export< 3.7.1
NPM: ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content
6.5
1 minute ago
@apostrophecms/import-export< 3.7.1
NPM: ApostropheCMS: Import archives can exhaust server storage and deny service
6.5
3 minutes ago
vite-plus<= 1.0.0
NPM: Vite: Cross origin script execution through Vite custom middleware
2.1
12 minutes ago
vite<= 6.4.3
NPM: Vite: Cross origin script execution through Vite custom middleware
2.1
12 minutes ago
vite-plus<= 1.0.0
NPM: Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine
6.3
13 minutes ago
vite<= 6.4.3
NPM: Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine
6.3
13 minutes ago
vite-plus>= 0.2.8, <= 1.0.0
NPM: Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`
6.3
13 minutes ago
vite>= 8.2.0, <= 8.2.3
NPM: Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`
6.3
13 minutes ago
WooCommerce Cart Abandonment Recovery< 2.2.0
Unauthenticated Authentication Bypass vulnerability
3.7
2 hours ago
LatePoint< 5.7.5
Unauthenticated Payment Bypass vulnerability
5.3
2 hours ago
Simple Shopping Cart< 5.3.3
Unauthenticated Payment Bypass vulnerability
5.3
2 hours ago
CMP – Coming Soon & Maintenance4.1.19-4.1.20
Unauthenticated Maintenance Mode Bypass vulnerability
5.3
2 hours ago
Wava Payment0.3.1-0.3.9
Unauthenticated Merchant Credential Overwrite vulnerability
6.5
2 hours ago
WholesaleX< 3.0.9
Unauthenticated Imported User CSV Disclosure vulnerability
5.9
3 hours ago
Profile Builder< 4.0.1
Reflected XSS vulnerability
7.1
3 hours ago
Redirection for Contact Form 72.2.7-3.2.11
Unauthenticated Stored XSS vulnerability
7.1
3 hours ago
WP Booking System< 2.1.0.3
Reflected XSS vulnerability
7.1
3 hours ago
@apostrophecms/import-export< 3.7.0
NPM: ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
7.5
3 hours ago
apostrophe< 4.33.0
NPM: ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
7.5
3 hours ago
WC Ukraine Shipping< 1.23.4
Subscriber+ Arbitrary Shipping Label Deletion vulnerability
4.3
3 hours ago