Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,119
NuGet
735
pip
3,941
Pub
12
RubyGems
945
Rust
1,018
Swift
39
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

268,962 advisories

Loading
The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘log_duration’... Moderate Unreviewed
CVE-2025-8692 was published Sep 11, 2025
The Ultimate Classified Listings plugin for WordPress is vulnerable to Local File Inclusion in... High Unreviewed
CVE-2025-9874 was published Sep 11, 2025
The AutoCatSet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions... Moderate Unreviewed
CVE-2025-9631 was published Sep 11, 2025
The Admin in English with Switch plugin for WordPress is vulnerable to Cross-Site Request Forgery... Moderate Unreviewed
CVE-2025-9623 was published Sep 11, 2025
The CBX Map for Google Map & OpenStreetMap plugin for WordPress is vulnerable to Stored Cross... Moderate Unreviewed
CVE-2025-9123 was published Sep 11, 2025
The All in one Minifier plugin for WordPress is vulnerable to SQL Injection via the 'post_id'... High Unreviewed
CVE-2025-9073 was published Sep 11, 2025
The eID Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’... Moderate Unreviewed
CVE-2025-9128 was published Sep 11, 2025
The WP Scriptcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url'... Moderate Unreviewed
CVE-2025-8691 was published Sep 11, 2025
The Seo Monster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions... Moderate Unreviewed
CVE-2025-9620 was published Sep 11, 2025
The The integration of the AMO.CRM plugin for WordPress is vulnerable to Cross-Site Request... Moderate Unreviewed
CVE-2025-9628 was published Sep 11, 2025
The Publish approval plugin for WordPress is vulnerable to Cross-Site Request Forgery in all... Moderate Unreviewed
CVE-2025-9617 was published Sep 11, 2025
Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability. Critical Unreviewed
CVE-2025-58321 was published Sep 11, 2025
The Run Log plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up... Moderate Unreviewed
CVE-2025-9627 was published Sep 11, 2025
The Enhanced BibliPlug plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... Moderate Unreviewed
CVE-2025-9855 was published Sep 11, 2025
A Path Traversal vulnerability in the archive extraction component in Google SecOps SOAR Server ... High Unreviewed
CVE-2025-9918 was published Sep 11, 2025
The User Meta – User Profile Builder and User management plugin plugin for WordPress is... High Unreviewed
CVE-2025-9693 was published Sep 11, 2025
The PhpList Subber plugin for WordPress is vulnerable to Cross-Site Request Forgery in all... Moderate Unreviewed
CVE-2025-9632 was published Sep 11, 2025
The Evenium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ... Moderate Unreviewed
CVE-2025-9850 was published Sep 11, 2025
The Smartcat Translator for WPML plugin for WordPress is vulnerable to time-based SQL Injection... Moderate Unreviewed
CVE-2025-9451 was published Sep 11, 2025
Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability. High Unreviewed
CVE-2025-58320 was published Sep 11, 2025
The Plugin updates blocker plugin for WordPress is vulnerable to Cross-Site Request Forgery in... Moderate Unreviewed
CVE-2025-9634 was published Sep 11, 2025
The LH Signing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions... Moderate Unreviewed
CVE-2025-9633 was published Sep 11, 2025
The ThemeLoom Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... Moderate Unreviewed
CVE-2025-9861 was published Sep 11, 2025
The Analytics Reduce Bounce Rate plugin for WordPress is vulnerable to Cross-Site Request Forgery... Moderate Unreviewed
CVE-2025-9635 was published Sep 11, 2025
The Mixtape plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ... Moderate Unreviewed
CVE-2025-9860 was published Sep 11, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database