The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,742
Mitigations19,212
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@tsparticles/mcp-server< 4.3.2
npm: tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients
6.9
50 minutes ago
@tsparticles/mcp-server<= 4.3.0
npm: tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process
8.7
51 minutes ago
@tsparticles/mcp-server< 4.3.1
npm: tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS
7.5
54 minutes ago
ag-psd<= 31.0.0
npm: ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)
7.5
56 minutes ago
isomorphic-git<= 1.38.5
npm: isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout
5.3
1 hour ago
isomorphic-git<= 1.38.5
npm: isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)
4.3
2 hours ago
isomorphic-git<= 1.38.5
npm: isomorphic-git: Arbitrary file write outside of working tree via directory symlink during checkout (potential RCE)
8.8
2 hours ago
Fusion Builder<= 3.16.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
ARMember Premium<= 7.8.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
2 hours ago
Ultimate Addons for Contact Form 7<= 3.5.54
Unauthenticated Arbitrary File Read vulnerability
7.5
2 hours ago
Multilingual CMS<= 4.9.7
Unauthenticated Authentication Bypass in Language-per-Domain SSO vulnerability
8.1
2 hours ago
Extend B2B - Companies and Users Management for WooCommerce<= 2.1.4
WordPress Extend B2B - Companies and Users Management for WooCommerce plugin <= 2.1.4 - Unauthenticated Sensitive Information Exposure in /wp/v2/aio_company REST Endpoint vulnerability
5.3
5 hours ago
JWT Auth<= 3.0.2
Unauthenticated Account Access Persistence vulnerability
8.1
9 hours ago
FraudLabs Pro SMS Verification1.11.2-1.12.1
Unauthenticated SMS Verification Bypass vulnerability
5.3
10 hours ago
Confection WordPress Cable0.4.0-0.4.7
Unauthenticated RCE vulnerability
10
10 hours ago
WP Duplicate<= 1.1.11
Unauthenticated Arbitrary File Upload vulnerability
10
11 hours ago
Userplace<= 1.2.0
Unauthenticated Privilege Escalation vulnerability
9.8
11 hours ago
Ecommerce Affiliate<= 1.0.0
Unauthenticated Account Takeover vulnerability
8.1
11 hours ago
Advanced Appointment Booking &amp; Scheduling< 2.7
Unauthenticated Arbitrary User Registration vulnerability
5.3
12 hours ago
EASY-JS-WPAPI Client HANDLE for the WordPress REST-API<= 2.0
Unauthenticated Administrator Password Disclosure and Authentication Bypass vulnerability
9.8
12 hours ago