Open Source Vulnerability Database - Patchstack

The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing

Rated 4.9

Total55,181

MitigationsMitigation rules18,291

No official patch13,657

In triage923

Published soon45

StatsWordPress stats

CVSS0

Mitigation available

Exploited

Affected software \| Vulnerability	Risk	Disclosed
Off-Canvas Sidebars & Menus (Slidebars)<= 0.5.9 Cross Site Scripting (XSS) vulnerability	6.5	41 minutes ago
SureDash<= 1.12.2 Broken Access Control vulnerability	5.3	41 minutes ago
SureDash<= 1.12.2 Broken Access Control vulnerability	5.3	42 minutes ago
myCred<= 4.0.0-beta.1 Insecure Direct Object References (IDOR) vulnerability	5.4	44 minutes ago
PowerPack Addons for Elementor<= 3.1.0 Broken Access Control vulnerability	4.3	1 hour ago
Strong Testimonials<= 3.3.14 Broken Access Control vulnerability	4.3	1 hour ago
Falcon – WordPress Optimizations & Tweaks<= 2.12.0 Broken Access Control vulnerability	5.3	1 hour ago
Jane Menu< 1.5.1 Unauthenticated Stored XSS vulnerability	7.1	1 hour ago
Metform<= 4.3.2 Broken Access Control vulnerability	5.3	1 hour ago
MarketKing<= 2.1.72 Broken Access Control vulnerability	5.4	1 hour ago
Xpro Elementor Addons<= 1.7.10 Cross Site Request Forgery (CSRF) vulnerability	8.8	1 hour ago
Weglot Translate< 6.4.3 Unauthenticated Stored XSS vulnerability	7.1	1 hour ago
eRoom<= 1.7.1 Settings Change vulnerability	5.4	1 hour ago
H5P<= 1.17.9 Cross Site Scripting (XSS) vulnerability	6.5	1 hour ago
Elementor Addon Elements<= 1.14.4 Cross Site Scripting (XSS) vulnerability	6.5	1 hour ago
vite-plus>= 1.0.0-rc.0, < 1.3.0 NPM: Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file	6.5	12 hours ago
@vitest/browser>= 5.0.0-beta.6, < 5.0.5 NPM: Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file	6.5	12 hours ago
@vitest/ui>= 5.0.0-beta.6, < 5.0.5 NPM: Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file	6.5	12 hours ago
@vitest/mocker>= 2.1.0-beta.7, < 4.1.12 NPM: Vitest: Code injection via unauthenticated manual mock registration	4.7	12 hours ago
@vitest/mocker>= 4.1.11, < 4.1.12 NPM: Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix	5.9	12 hours ago

Sunbelt Computer Software

PL/B Language Development and Support

The leading open source vulnerability database