The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total55,166
Mitigations18,282
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
PowerPack Addons for Elementor<= 3.1.0
Broken Access Control vulnerability
4.3
21 minutes ago
Strong Testimonials<= 3.3.14
Broken Access Control vulnerability
4.3
22 minutes ago
Falcon – WordPress Optimizations & Tweaks<= 2.12.0
Broken Access Control vulnerability
5.3
22 minutes ago
Jane Menu< 1.5.1
Unauthenticated Stored XSS vulnerability
7.1
22 minutes ago
Metform<= 4.3.2
Broken Access Control vulnerability
5.3
24 minutes ago
MarketKing<= 2.1.72
Broken Access Control vulnerability
5.4
24 minutes ago
Xpro Elementor Addons<= 1.7.10
Cross Site Request Forgery (CSRF) vulnerability
8.8
25 minutes ago
Weglot Translate< 6.4.3
Unauthenticated Stored XSS vulnerability
7.1
26 minutes ago
eRoom<= 1.7.1
Settings Change vulnerability
5.4
26 minutes ago
H5P<= 1.17.9
Cross Site Scripting (XSS) vulnerability
6.5
28 minutes ago
Elementor Addon Elements<= 1.14.4
Cross Site Scripting (XSS) vulnerability
6.5
29 minutes ago
vite-plus>= 1.0.0-rc.0, < 1.3.0
NPM: Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
6.5
11 hours ago
@vitest/browser>= 5.0.0-beta.6, < 5.0.5
NPM: Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
6.5
11 hours ago
@vitest/ui>= 5.0.0-beta.6, < 5.0.5
NPM: Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
6.5
11 hours ago
@vitest/mocker>= 2.1.0-beta.7, < 4.1.12
NPM: Vitest: Code injection via unauthenticated manual mock registration
4.7
11 hours ago
@vitest/mocker>= 4.1.11, < 4.1.12
NPM: Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
5.9
11 hours ago
@apostrophecms/import-export< 3.7.1
NPM: ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
6
11 hours ago
openclaw< 2026.6.6
NPM: OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
8.5
11 hours ago
Tailored Tools<= 3.0.3
Cross Site Request Forgery (CSRF) vulnerability
6.5
13 hours ago
H5P<= 1.17.9
Insecure Direct Object References (IDOR) vulnerability
4.3
13 hours ago