The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total50,170
Mitigations16,181
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@angular/platform-server<= 19.2.25
NPM: Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
8.6
8 minutes ago
@angular/common<= 19.2.25
NPM: Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
8.8
23 minutes ago
VikBooking Hotel Booking Engine & PMS<= 1.8.13
Reflected Cross-Site Scripting vulnerability
7.1
4 hours ago
WPify Woo Czech<= 5.4.16
Authenticated (Shop Manager+) Privilege Escalation vulnerability
7.2
4 hours ago
Checkout Field Editor for WooCommerce (Pro)<= 3.7.7
Authenticated (Subscriber+) Path Traversal to Arbitrary File Read vulnerability
6.5
4 hours ago
Nexter Blocks<= 5.0.0
Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion vulnerability
4.3
4 hours ago
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart<= 2.1.0
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
VikBooking Hotel Booking Engine & PMS<= 1.8.13
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
4 hours ago
Paid Memberships Pro<= 3.8.1
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
4 hours ago
Tablesome< 1.1.31
Unauthenticated Post Creation and Modification vulnerability
6.5
5 hours ago
Contact Form Entries< 1.5.3
Reflected XSS vulnerability
7.1
5 hours ago
Quiz And Survey Master< 11.1.3
Unauthenticated User Enumeration and Password Oracle vulnerability
5.3
5 hours ago
Bookly< 27.8
Unauthenticated SQL Injection vulnerability
9.3
5 hours ago
Hotel Booking Lite< 6.0.4
Subscriber+ Sensitive Data Disclosure vulnerability
7.5
5 hours ago
Remote API<= 0.2
Unauthenticated PHP Object Injection vulnerability
9.8
5 hours ago
Ultimate Addons for WPBakery Page Builder< 3.21.4
Unauthenticated Custom Icon Font Deletion vulnerability
6.5
5 hours ago
Booking Calendar Contact Form<= 1.0.23
Shortcode SQL Injection vulnerability
9.3
6 hours ago
Booking Calendar Contact Form< 1.0.24
Blind SQL Injection vulnerability
9.3
8 hours ago
Single Personal Message<= 1.0.3
Authenticated (Subscriber+) SQL Injection vulnerability
8.5
8 hours ago
Photocart Link<= 1.6
Unauthenticated Local File Inclusion vulnerability
8.1
8 hours ago