GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+
137,189 advisories
Filter by severity
Cross-Site Request Forgery (CSRF) vulnerability in weDevs WP Project Manager allows Cross Site...
Moderate
Unreviewed
CVE-2025-32280
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks WP Zendesk for Contact Form 7,...
Moderate
Unreviewed
CVE-2025-32269
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in www.15.to QR Code Tag for WC allows Cross Site...
Moderate
Unreviewed
CVE-2025-32268
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Robert D Payne RDP Wiki Embed allows Cross...
Moderate
Unreviewed
CVE-2025-32262
was published
Apr 4, 2025
Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability in...
Moderate
Unreviewed
CVE-2025-32257
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in BeRocket Sequential Order Numbers for...
Moderate
Unreviewed
CVE-2025-32263
was published
Apr 4, 2025
Missing Authorization vulnerability in InfoGiants Simple Website Logo allows Exploiting...
Moderate
Unreviewed
CVE-2025-32258
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP allows Cross Site Request...
Moderate
Unreviewed
CVE-2025-32265
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Kuppuraj Advanced All in One Admin Search by...
Moderate
Unreviewed
CVE-2025-32261
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Saiful Islam UltraAddons Elementor Lite allows...
Moderate
Unreviewed
CVE-2025-32264
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in wpzinc Post to Social Media – WordPress to...
Moderate
Unreviewed
CVE-2025-32267
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in wp-buy 404 Image Redirection (Replace Broken...
Moderate
Unreviewed
CVE-2025-32266
was published
Apr 4, 2025
Missing Authorization vulnerability in Tim Nguyen 1-Click Backup & Restore Database allows...
Moderate
Unreviewed
CVE-2025-32246
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in designinvento DirectoryPress allows Cross Site...
Moderate
Unreviewed
CVE-2025-32249
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in ABCdatos AI Content Creator allows Cross Site...
Moderate
Unreviewed
CVE-2025-32247
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in SwiftXR SwiftXR (3D/AR/VR) Viewer allows Cross...
Moderate
Unreviewed
CVE-2025-32248
was published
Apr 4, 2025
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J....
Moderate
Unreviewed
CVE-2025-32251
was published
Apr 4, 2025
Missing Authorization vulnerability in blackandwhitedigital WP Genealogy – Your Family History...
Moderate
Unreviewed
CVE-2025-32252
was published
Apr 4, 2025
Cross-Site Request Forgery (CSRF) vulnerability in rollbar Rollbar allows Cross Site Request...
Moderate
Unreviewed
CVE-2025-32250
was published
Apr 4, 2025
Missing Authorization vulnerability in Iqonic Design WPBookit allows Accessing Functionality Not...
Moderate
Unreviewed
CVE-2025-32254
was published
Apr 4, 2025
Missing Authorization vulnerability in ComMotion Course Booking System allows Accessing...
Moderate
Unreviewed
CVE-2025-32253
was published
Apr 4, 2025
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
Moderate
Unreviewed
CVE-2025-32255
was published
Apr 4, 2025
Missing Authorization vulnerability in devsoftbaltic SurveyJS allows Accessing Functionality Not...
Moderate
Unreviewed
CVE-2025-32256
was published
Apr 4, 2025
Missing Authorization vulnerability in WP Chill Revive.so – Bulk Rewrite and Republish Blog Posts...
Moderate
Unreviewed
CVE-2025-32233
was published
Apr 4, 2025
Missing Authorization vulnerability in Bookingor Bookingor allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-32231
was published
Apr 4, 2025
ProTip!
Advisories are also available from the
GraphQL API