Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupal sportsleagueSportsleague - Critical - Unsupported - SA-CONTRIB-2025-045CVE-2025-39047.3 High
- drupal ueditor - 百度编辑器, ueditor project ueditor +1 moreUEditor - 百度编辑器 - Critical - Unsupported - SA-CONTRIB-2025-044CVE-2025-39037.3 High
- drupal block classBlock Class - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-043CVE-2025-3902Fix available6.1 Medium
- bootstrap site alert project site alert, drupal bootstrap site alert +1 moreBootstrap Site Alert - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-042CVE-2025-3901Fix available6.1 Medium
- colorbox project colorboxColorbox - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-041CVE-2025-3900Fix available6.1 Medium
- bendlz at internet smarttagWordPress AT Internet SmartTag plugin <= 0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-325067.1 High
- drupal 8 google optimize hide pageDrupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040CVE-2025-37395.9 Medium
- drupal google optimize, google optimize project optimize +1 moreGoogle Optimize - Critical - Unsupported - SA-CONTRIB-2025-039CVE-2025-37385.9 Medium
- drupal google maps: store locator, google maps\ store locator project +1 moreGoogle Maps: Store Locator - Critical - Unsupported - SA-CONTRIB-2025-038CVE-2025-37375.9 Medium
- drupal simple gtm, simple gtm project gtm +1 moreSimple GTM - Critical - Unsupported - SA-CONTRIB-2025-037CVE-2025-37365.9 Medium
- drupal panelizer (obsolete), panelizer \(obsolete\) project \(obsolete\) +1 morePanelizer (obsolete) - Critical - Unsupported - SA-CONTRIB-2025-036CVE-2025-37355.9 Medium
- drupal stage file proxy, stage file proxy project file proxy +1 moreStage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-035CVE-2025-3734Fix available5.9 Medium
- baguettebox.js project baguettebox.jsbaguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-034CVE-2025-3733Fix available6.5 Medium
- drupal panelsPanels - Critical - Access bypass - SA-CONTRIB-2025-033CVE-2025-3474Fix available6.5 Medium
- drupal eca: event - condition - action, eca\ +1 moreECA: Event - Condition - Action - Critical - Cross site request forgery - SA-CONTRIB-2025-031CVE-2025-3131Fix available5.4 Medium
- drupal web-tWEB-T - Moderately critical - Access bypass, Denial of service - SA-CONTRIB-2025-030CVE-2025-3475Fix available6.5 Medium
- drupal obfuscateObfuscate - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-029CVE-2025-3130Fix available5.4 Medium
- access code project code, drupal access code +1 moreAccess code - Moderately critical - Access bypass - SA-CONTRIB-2025-028CVE-2025-3129Fix available4.8 Medium
- drupal formatter suite, formatter suite project suite +1 moreFormatter Suite - Moderately critical - Cross site scripting - SA-CONTRIB-2025-026CVE-2025-31697Fix available6.1 Medium
- chapterthree rapidoc oas field formatterRapiDoc OAS Field Formatter - Moderately critical - Cross site scripting - SA-CONTRIB-2025-025CVE-2025-31696Fix available6.1 Medium
- drupal link field display mode formatterLink field display mode formatter - Moderately critical - Cross site scripting - SA-CONTRIB-2025-024CVE-2025-31695Fix available6.1 Medium
- drupal two-factor authentication (tfa), two-factor authentication project authentication +1 moreTwo-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2025-023CVE-2025-31694Fix available8.1 High
- artificial intelligence project intelligence, drupal ai (artificial intelligence) +1 moreAI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022CVE-2025-31693Fix available6.6 Medium
- artificial intelligence project intelligence, drupal ai (artificial intelligence) +1 moreAI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021CVE-2025-31692Fix available7.5 High
- drupal oauth2 server, oauth2 server project server +1 moreOAuth2 Server - Moderately critical - Access bypass - SA-CONTRIB-2025-020CVE-2025-31691Fix available9.8 Critical
- cache utility project utility, drupal cache utility +1 moreCache Utility - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-019CVE-2025-31690Fix available8.8 High
- drupal general data protection regulation, general data protection regulation project data protection regulation +1 moreGeneral Data Protection Regulation - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-018CVE-2025-31689Fix available8.1 High
- drupal configuration splitConfiguration Split - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-017CVE-2025-31688Fix available6.8 Medium
- drowl spamspan filterSpamSpan filter - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-016CVE-2025-31687Fix available6.1 Medium
- drupal open socialOpen Social - Less critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-015CVE-2025-31686Fix available8.1 High
- drupal open socialOpen Social - Moderately critical - Access bypass - SA-CONTRIB-2025-014CVE-2025-31685Fix available9.1 Critical
- drupal oauth2 clientOAuth2 Client - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-013CVE-2025-31684Fix available6.8 Medium
- drupal google tag, google tag project tag +1 moreGoogle Tag - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-012CVE-2025-31683Fix available6.8 Medium
- drupal google tag, google tag project tag +1 moreGoogle Tag - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-011CVE-2025-31682Fix available4.8 Medium
- admin lte theme project lte theme, drupal admin lte theme +1 moreDrupal Admin LTE theme - Critical - Unsupported - SA-CONTRIB-2025-010CVE-2025-30626.6 Medium
- authenticator login project login, drupal authenticator login +1 moreAuthenticator Login - Critical - Access bypass - SA-CONTRIB-2025-009CVE-2025-31681Fix available9.8 Critical
- drupal matomo analytics, matomo analytics project analytics +1 moreMatomo Analytics - Moderately critical - Cross site request forgery - SA-CONTRIB-2025-008CVE-2025-31680Fix available6.8 Medium
- drupal ignition error pages, ignition error pages project error pages +1 moreIgnition Error Pages - Critical - Cross Site Scripting - SA-CONTRIB-2025-007CVE-2025-31679Fix available6.1 Medium
- drupal material admin, material admin project admin +1 moreMaterial Admin - Critical - Unsupported - SA-CONTRIB-2025-006CVE-2025-30616.6 Medium
- drupal flattern – multipurpose bootstrap business profile, flattern project flattern +1 moreFlattern – Multipurpose Bootstrap Business Profile - Critical - Unsupported - SA-CONTRIB-2025-005CVE-2025-30606.6 Medium
- artificial intelligence project intelligence, drupal ai (artificial intelligence) +1 moreAI (Artificial Intelligence) - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-004CVE-2025-31678Fix available8.2 High
- artificial intelligence project intelligence, drupal ai (artificial intelligence) +1 moreAI (Artificial Intelligence) - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-003CVE-2025-31677Fix available8.8 High
- drupal print anything, print anything project anything +1 morePrint Anything - Critical - Unsupported - SA-CONTRIB-2024-066CVE-2024-133006.6 Medium
- boozallen megamenu frameworkMegamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-065CVE-2024-132996.6 Medium
- drupal eloquaEloqua - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-063CVE-2024-132976.6 Medium
- drupal node export, node export project export +1 moreNode export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061CVE-2024-132956.6 Medium
- basic http authentication project http authentication, drupal basic http authentication +1 moreBasic HTTP Authentication - Critical - Access bypass - SA-CONTRIB-2024-057CVE-2024-132917.3 High
- drupal smart ip ban, smart ip ban project ip ban +1 moreSmart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-041CVE-2024-132779.1 Critical
- drupal file entity (fieldable files), file entity project entity +1 moreFile Entity (fieldable files) - Moderately critical - Information Disclosure - SA-CONTRIB-2024-040CVE-2024-132767.5 High
- drupal opignoOpigno - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-032CVE-2024-132686.8 Medium
- Show moreLoading…