Skip to contentDiscourse vulnerabilities
Newest
- discourseDiscourse discloses restricted post-action counts to non-privileged usersCVE-2026-27936Fix available6.9 Medium
- discourseDiscourse leaks private topic metadata to non-authorized usersCVE-2026-27935Fix available6.9 Medium
- discourseDiscourse leaks private topic title and post excerpt via user action API endpointCVE-2026-27934Fix available8.7 High
- discourseDiscourse has Stored XSS in AI Triage AutomationCVE-2026-27740Fix available5.1 Medium
- discourseDiscourse Vulnerable to Stored XSS via Shared AI Conversation OneboxCVE-2026-27570Fix available5.1 Medium
- discourseDiscourse has a bypass of official warnings messages by non-staff usersCVE-2026-27491Fix available6.9 Medium
- discourseDiscourse has check revision visibility on posts endpointCVE-2026-27454Fix available5.3 Medium
- discourseDiscourse vulnerable to HTML injection via prohibited iframe URLsCVE-2026-27166Fix available4.1 Medium
- discourseDiscourse Vulnerable to Unauthorized Topic Creation in Staff-Only Categories via Topic Timer publish_to_categoryCVE-2026-28227Fix available1.2 Low
- discoursePrivilege Escalation via Mass Assignment Allows Regular Users to Set Topics as Global BannersCVE-2026-28219Fix available1.3 Low
- discourseDiscourse's Fail-Open Access Control in Data Explorer Plugin Allows Unauthorized SQL Query ExecutionCVE-2026-28218Fix available5.3 Medium
- discourseDiscourse has XSS when editing a malicious postCVE-2026-27154Fix available1.3 Low
- discourseDiscourse doesn't prevent moderators from exporting user Chat DMsCVE-2026-27153Fix available1.3 Low
- discourseDIscourse has DM communication-preference bypass when adding membersCVE-2026-27152Fix available1.3 Low
- discourseDIscourse doesn't prevent whispers to leak in excerptsCVE-2026-27162Fix available4.9 Medium
- discourseDiscourse doesn't validate destination topic when moving postsCVE-2026-27151Fix available1.3 Low
- discourseDiscourse doesn't ensure guardian check when creating QueryGroupBookmarkCVE-2026-27150Fix available1.3 Low
- discourseDiscourse has SQL injection in PM tag filteringCVE-2026-27149Fix available4.9 Medium
- discourseDiscourse: Poll voters endpoint lacked post visibility checksCVE-2026-27021Fix available6.9 Medium
- discourseDiscourse: TL4 users are able to change status of restricted topicsCVE-2026-26979Fix available0.0 None
- discourseDiscourse doesn't scope reviewable notes to user-visible reviewablesCVE-2026-26973Fix available4.3 Medium
- discourseDiscourse has IDOR vulnerability in the directory items endpointCVE-2026-26265Fix available7.5 High
- discourseDIscourse's discourse-policy plugin lacks post access checkCVE-2026-26207Fix available5.4 Medium
- discourseDiscourse has authentication bypass vulnerability in the Patreon plugin webhook endpointCVE-2026-26078Fix available7.5 High
- discourseDiscourse doesn't ensure webhooks require a tokenCVE-2026-26077Fix available6.5 Medium
- discourseDiscourse staff action logs expose sensitive information to moderatorsCVE-2026-24742Fix available6.5 Medium
- discourseDiscourse allows permalinks to restricted resources to leak resource slugs to unauthorized usersCVE-2026-23743Fix available6.9 Medium
- discourseDiscourse topic conversion permission vulnerability for moderatorsCVE-2026-21865Fix available6.5 Medium
- discourseDiscourse has insecure default configuration that allows non-admin moderators to takeover any non-staff account via email changeCVE-2025-69289Fix available5.1 Medium
- discourseDiscourse moderators can access admin-only reports exposing private upload URLsCVE-2025-69218Fix available7.1 High
- discourseDiscourse Has Denial of Service (DoS) Vulnerability in Drafts Creation EndpointCVE-2025-68934Fix available6.5 Medium
- discourseDiscourse non-admin moderators can exfiltrate private content via post ownership transferCVE-2025-68933Fix available6.9 Medium
- discourseDiscourse users archives leaked to users with moderation privilegesCVE-2025-68666Fix available5.9 Medium
- discourseFinalDestination hostname matching allows SSRF protection bypassCVE-2025-68662Fix available7.6 High
- discourseDiscourse AI Discover's continue conversation allows threat actor to impersonate userCVE-2025-68660Fix available5.3 Medium
- discourseDiscourse has DoS vulnerability in username change endpointCVE-2025-68659Fix available4.3 Medium
- discourseDiscourse subscriptions are susceptible to takeoverCVE-2025-68479Fix available7.1 High
- discourseDiscourse vulnerable to stored Cross-site Scripting via Katex in discourse-math pluginCVE-2025-67723Fix available4.6 Medium
- discourseDiscourse allows script execution in uploaded HTML/XML files on S3CVE-2025-66488Fix available4.6 Medium
- discourseUsers are able to find users by name even when `enable_names` is offCVE-2025-64528Fix available6.3 Medium
- discourseDiscourse is missing Cache-Control response header on error responsesCVE-2025-61598Fix available6.3 Medium
- discourseDiscourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite DeploymentsCVE-2025-59337Fix available5.5 Medium
- discourseDiscourse AI Suggestions Contain Insecure Direct Object ReferenceCVE-2025-58055Fix available4.3 Medium
- discourseDiscourse is vulnerable to XSS when quoting chat messagesCVE-2025-58054Fix available3.5 Low
- discourseDiscourse welcome banner user name XSSCVE-2025-54411Fix available2.4 Low
- discourseDiscourse's WebAuthn challenge isn't cleared from user session after authenticationCVE-2025-53102Fix available8.2 High
- discourseDiscourse users are able to see their own whispers even after being removed from a group that has been configured to see whispersCVE-2025-49845Fix available6.3 Medium
- discourseDiscourse vulnerable to XSS via user-provided query parameter in oauth failure flowCVE-2025-48954Fix available8.1 High
- discourseDiscourse vulnerable to auto-executing of third-party code in embedded CodePen iframeCVE-2025-48877Fix available8.1 High
- discourseDiscourse vulnerable to HTML injection when inviting to topic via emailCVE-2025-48062Fix available7.1 High
- Show moreLoading…