Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupal opigno tincan question type, opigno tincan question type +1 moreOpigno TinCan Question Type - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-031CVE-2024-132677.5 High
- drupal restful web services, restful web services project web services +1 moreRESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019CVE-2024-132557.5 High
- drupal node access rebuild progressive, node access rebuild progressive project access rebuild progressive +1 moreNode Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-013CVE-2024-132495.4 Medium
- drupal file entity (fieldable files), file entity project entity +1 moreFile Entity (fieldable files) - Moderately critical - Cross Site Scripting, Access bypass - SA-CONTRIB-2024-001CVE-2024-132375.4 Medium
- drupal profile private, profile private project private +1 moreProfile Private - Critical - Unsupported - SA-CONTRIB-2025-002CVE-2025-30595.3 Medium
- drupal email tfa, email tfa project tfa +1 moreEmail TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-001CVE-2025-31676Fix available8.8 High
- drupal matomo analyticsWordPress Matomo Analytics plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) leading to Notice Dismissal vulnerabilityCVE-2024-387664.3 Medium
- drupal open socialOpen Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076CVE-2024-133125.3 Medium
- allow all file extensions for file fields project all file extensions for file fields, drupal allow all file extensions for file fields +1 moreAllow All File Extensions for file fields - Critical - Unsupported - SA-CONTRIB-2024-075CVE-2024-133117.3 High
- drupal git utilities for drupal, git utilities project utilities +1 moreGit Utilities for Drupal - Critical - Unsupported - SA-CONTRIB-2024-074CVE-2024-133106.5 Medium
- drupal login disable, login disable project disable +1 moreLogin Disable - Critical - Access bypass - SA-CONTRIB-2024-073CVE-2024-13309Fix available5.4 Medium
- browser back button project back button, drupal browser back button +1 moreBrowser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072CVE-2024-13308Fix available3.8 Low
- drupal, drupal core +1 moreDrupal core - Critical - Cross Site Scripting - SA-CORE-2024-005CVE-2024-55635Fix available6.1 Medium
- drupal entity form stepsEntity Form Steps - Moderately critical - Cross site scripting - SA-CONTRIB-2024-071CVE-2024-13305Fix available4.8 Medium
- drupal minify jsMinify JS - Moderately critical - Cross site request forgery - SA-CONTRIB-2024-070CVE-2024-13304Fix available4.5 Medium
- download all files project all files, drupal download all files +1 moreDownload All Files - Critical - Access bypass - SA-CONTRIB-2024-069CVE-2024-13303Fix available5.3 Medium
- ciandt pages restriction accessPages Restriction Access - Critical - Access bypass - SA-CONTRIB-2024-068CVE-2024-13302Fix available5.3 Medium
- drupal oauth & openid connect single sign on – sso (oauth/oidc client), miniorange oauth \& openid connect single sign-on +1 moreOAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067CVE-2024-13301Fix available6.1 Medium
- drupal tarte au citronTarte au Citron - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-064CVE-2024-13298Fix available4.8 Medium
- drupal mailjetMailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062CVE-2024-13296Fix available6.6 Medium
- drupal post file, post file project file +1 morePOST File - Critical - Cross Site Scripting, Arbitrary PHP code execution - SA-CONTRIB-2024-060CVE-2024-13294Fix available5.4 Medium
- drupal post file, post file project file +1 morePOST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059CVE-2024-13293Fix available3.1 Low
- drupal tooltipTooltip - Moderately critical - Cross site scripting - SA-CONTRIB-2024-058CVE-2024-13292Fix available4.8 Medium
- drupal ohdear integration, ohdear integration +1 moreOhDear Integration - Moderately critical - Access bypass - SA-CONTRIB-2024-056CVE-2024-13290Fix available5.3 Medium
- drupal cookiebot + gtm, usercentrics cookiebot \+ gtm +1 moreCookiebot + GTM - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-055CVE-2024-13289Fix available5.4 Medium
- drupal monster menus, monster menus project menus +1 moreMonster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052CVE-2024-13288Fix available4.3 Medium
- drupal views svg animation, views svg animation project svg animation +1 moreViews SVG Animation - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-051CVE-2024-13287Fix available5.4 Medium
- drupal svg embed, svg embed project embed +1 moreSVG Embed - Moderately critical - Cross site scripting - SA-CONTRIB-2024-050CVE-2024-13286Fix available5.4 Medium
- drupal, drupal core +1 moreDrupal core - Moderately critical - Improper error handling - SA-CORE-2024-002CVE-2024-11942Fix available5.9 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- drupal wkhtmltopdfwkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049CVE-2024-132859.8 Critical
- drupal gutenbergGutenberg - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-048CVE-2024-13284Fix available8.8 High
- drupal facetsFacets - Critical - Cross Site Scripting - SA-CONTRIB-2024-047CVE-2024-13283Fix available6.1 Medium
- block permissions project permissions, drupal block permissions +1 moreBlock permissions - Moderately critical - Access bypass - SA-CONTRIB-2024-046CVE-2024-13282Fix available8.8 High
- drupal monster menus, monster menus project menus +1 moreMonster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045CVE-2024-13281Fix available9.1 Critical
- drupal persistent login, persistent login project login +1 morePersistent Login - Moderately critical - Access bypass - SA-CONTRIB-2024-044CVE-2024-13280Fix available9.8 Critical
- drupal two-factor authentication (tfa), two-factor authentication project authentication +1 moreTwo-factor Authentication (TFA) - Critical - Access bypass - SA-CONTRIB-2024-043CVE-2024-13279Fix available9.8 Critical
- diff project diffDiff - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-042CVE-2024-13278Fix available9.1 Critical
- drupal security kit, security kit project kit +1 moreSecurity Kit - Less critical - Denial of Service - SA-CONTRIB-2024-039CVE-2024-13275Fix available5.3 Medium
- drupal open socialOpen Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038CVE-2024-13274Fix available5.3 Medium
- drupal open socialOpen Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037CVE-2024-132735.4 Medium
- drupal paragraphs table, paragraphs table project table +1 moreParagraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036CVE-2024-13272Fix available6.3 Medium
- content entity clone project entity clone, drupal content entity clone +1 moreContent Entity Clone - Moderately critical - Information Disclosure - SA-CONTRIB-2024-035CVE-2024-13271Fix available4.3 Medium
- drupal freelinkingFreelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034CVE-2024-13270Fix available4.3 Medium
- advanced varnish project varnish, drupal advanced varnish +1 moreAdvanced Varnish - Moderately critical - Access bypass - SA-CONTRIB-2024-033CVE-2024-13269Fix available5.3 Medium
- drupal responsive and off-canvas menu, responsive and off-canvas menu project and off-canvas menu +1 moreResponsive and off-canvas menu - Moderately critical - Access bypass - SA-CONTRIB-2024-030CVE-2024-13266Fix available5.3 Medium
- drupal opigno learning path, opigno learning path +1 moreOpigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029CVE-2024-13265Fix available7.5 High
- drupal opigno module, opigno module +1 moreOpigno module - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-028CVE-2024-13264Fix available9.8 Critical
- drupal opigno group manager, opigno group manager +1 moreOpigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027CVE-2024-13263Fix available5.5 Medium
- drupal view password, view password project password +1 moreView Password - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-026CVE-2024-13262Fix available4.8 Medium
- Show moreLoading…