Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,121
NuGet
735
pip
3,942
Pub
12
RubyGems
945
Rust
1,018
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

126,576 advisories

Loading
The Certifica WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... Moderate Unreviewed
CVE-2025-8316 was published Sep 11, 2025
The Elements Plus! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... Moderate Unreviewed
CVE-2025-8689 was published Sep 11, 2025
The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘log_duration’... Moderate Unreviewed
CVE-2025-8692 was published Sep 11, 2025
The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data due... Moderate Unreviewed
CVE-2025-8423 was published Sep 11, 2025
The AutoCatSet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions... Moderate Unreviewed
CVE-2025-9631 was published Sep 11, 2025
The Workable Api plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin... Moderate Unreviewed
CVE-2025-8721 was published Sep 11, 2025
The Admin in English with Switch plugin for WordPress is vulnerable to Cross-Site Request Forgery... Moderate Unreviewed
CVE-2025-9623 was published Sep 11, 2025
The CBX Map for Google Map & OpenStreetMap plugin for WordPress is vulnerable to Stored Cross... Moderate Unreviewed
CVE-2025-9123 was published Sep 11, 2025
The Countdown Timer for Elementor plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2025-8445 was published Sep 11, 2025
The eID Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’... Moderate Unreviewed
CVE-2025-9128 was published Sep 11, 2025
The Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid plugin for WordPress is... Moderate Unreviewed
CVE-2025-8481 was published Sep 11, 2025
The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url'... Moderate Unreviewed
CVE-2025-8691 was published Sep 11, 2025
The Seo Monster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions... Moderate Unreviewed
CVE-2025-9620 was published Sep 11, 2025
The The integration of the AMO.CRM plugin for WordPress is vulnerable to Cross-Site Request... Moderate Unreviewed
CVE-2025-9628 was published Sep 11, 2025
The Publish approval plugin for WordPress is vulnerable to Cross-Site Request Forgery in all... Moderate Unreviewed
CVE-2025-9617 was published Sep 11, 2025
The Run Log plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up... Moderate Unreviewed
CVE-2025-9627 was published Sep 11, 2025
The Smartcat Translator for WPML plugin for WordPress is vulnerable to time-based SQL Injection... Moderate Unreviewed
CVE-2025-9451 was published Sep 11, 2025
The azurecurve BBCode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... Moderate Unreviewed
CVE-2025-8398 was published Sep 11, 2025
The Zoho Flow plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to,... Moderate Unreviewed
CVE-2025-8479 was published Sep 11, 2025
The Ultimate Classified Listings plugin for WordPress is vulnerable to unauthorized modification... Moderate Unreviewed
CVE-2025-0763 was published Sep 11, 2025
The CatFolders – Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable... Moderate Unreviewed
CVE-2025-9776 was published Sep 11, 2025
A security vulnerability has been detected in JEPaaS 7.2.8. This vulnerability affects the... Moderate Unreviewed
CVE-2025-10247 was published Sep 11, 2025
A weakness has been identified in lokibhardwaj PHP-Code-For-Unlimited-File-Upload up to... Moderate Unreviewed
CVE-2025-10246 was published Sep 11, 2025
The Wp Edit Password Protected WordPress plugin before 1.3.5 does not validate a parameter... Moderate Unreviewed
CVE-2025-9034 was published Sep 11, 2025
A vulnerability has been found in binary-husky gpt_academic up to 3.91. Impacted is the function... Moderate Unreviewed
CVE-2025-10236 was published Sep 11, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database