The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total57,184
Mitigations19,331
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@sveltejs/kit< 2.70.4
npm: SvelteKit: adapter-node crashes with an unhandled URIError when `reroute` rewrites malformed pathnames
5.9
2 hours ago
@sveltejs/adapter-static< 3.0.11
npm: SvelteKit: Prerendered paths are interpreted as regular expressions in Vercel route config generated by @sveltejs/adapter-vercel and @sveltejs/adapter-static
5.9
2 hours ago
@sveltejs/adapter-vercel< 6.3.5
npm: SvelteKit: Prerendered paths are interpreted as regular expressions in Vercel route config generated by @sveltejs/adapter-vercel and @sveltejs/adapter-static
5.9
2 hours ago
@sveltejs/adapter-cloudflare>= 4.7.0, < 7.2.10
npm: SvelteKit: Prerendered redirect paths can inject arbitrary rules into the `_redirects` file generated by `@sveltejs/adapter-cloudflare`
5.9
2 hours ago
@sveltejs/adapter-node>= 5.5.7, < 5.5.8
npm: SvelteKit: `@sveltejs/adapter-node` crashes when proxying certain requests via `fetch`
5.9
2 hours ago
Flatsome<= 3.20.12
Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability
6.5
3 hours ago
@nuxt/nitro-server>= 4.6.0, < 4.6.4
npm: Nuxt: Incomplete fix for GHSA-9v7c-q64q-vv33: a leading `//` in the request path bypasses `server/middleware` path checks and server route rules on page routes
6.5
3 hours ago
@opentelemetry/instrumentation-http>= 0.204.0, < 0.222.0
npm: OpenTelemetry JavaScript: Insertion of Sensitive Information into Log File and Exposure of Sensitive Information to an Unauthorized Actor in @opentelemetry/instrumentation-http
5.8
3 hours ago
astro<= 7.4.4
npm: Astro: XSS via attribute injection in dynamic tag names
2.3
4 hours ago
astro>= 5.14.3, <= 7.4.6
npm: Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems
6.3
4 hours ago
@astrojs/node<= 11.1.11
npm: Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems
6.3
4 hours ago
@nuxt/schema>= 3.5.0, < 4.6.4
npm: Nuxt dev server serves files from a parent directory with a stray lockfile or workspace file
5.9
4 hours ago
AutomatorWP Pro Webhooks<= 1.4.4
Missing Authorization to Unauthenticated Arbitrary User Password Reset / Account Takeover via Webhook with 'Is the user ID' Field vulnerability
9.8
6 hours ago
Optimole<= 4.2.19
Unauthenticated PHP Object Injection to Arbitrary File Deletion via 'comment_content'/'comment_agent' Parameter during Attachment Rename vulnerability
7.1
6 hours ago
Spectra<= 2.20.5
Sensitive Data Exposure vulnerability
5.3
8 hours ago
RepairBuddy<= 4.1236
Broken Access Control vulnerability
5.3
8 hours ago
Extension for Leaflet Map<= 6.1.1
Cross Site Scripting (XSS) vulnerability
6.5
8 hours ago
Church Admin<= 5.1.8
Broken Access Control vulnerability
5.3
8 hours ago
PowerPack Lite for Beaver Builder<= 1.3.2
Cross Site Scripting (XSS) vulnerability
6.5
8 hours ago
Imagify<= 2.3.4
Broken Access Control vulnerability
4.3
8 hours ago