The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total52,848
Mitigations17,267
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
knowns<= 0.29.1
NPM: Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools
8.8
18 hours ago
@openzeppelin/confidential-contracts< 0.3.2
NPM: OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet
7.1
18 hours ago
Automatic.css4.0.0
Unauthenticated Stored Cross-Site Scripting via REQUEST_URI vulnerability
7.1
1 day ago
wpForo Forum3.0.0-3.1.5
Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass vulnerability
5.3
1 day ago
Link Library< 7.9.6
Reflected XSS vulnerability
7.1
1 day ago
Themify Builder<= 7.8.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
BP Better Messages<= 3.0.4
Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability
6.5
1 day ago
Repeater Fields for Elementor Forms<= 2.2.7
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
Fancy Product Designer<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
Bookly<= 28.2
Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion vulnerability
6.5
1 day ago
HT Contact Form 7<= 2.10.1
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
7.1
1 day ago
Bookly<= 28.2
Unauthenticated Authorization Bypass vulnerability
5.3
1 day ago
GeoDirectory<= 2.8.183
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 day ago
WP Maps<= 4.9.8
Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
6.5
1 day ago
Fancy Product Designer<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
Restaurant Menu by MotoPress<= 2.4.14
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
Fancy Product Designer<= 6.5.2
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
AMP for WP<= 1.1.16
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
WPDM – Premium Packages<= 7.2.1
Unauthenticated Stored Cross-Site Scripting vulnerability
7.1
1 day ago
JetFormBuilder<= 3.6.5.3
Reflected Cross-Site Scripting vulnerability
7.1
1 day ago