Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- ai seo link advisor project seo link advisor, drupal ai seo link advisor +1 moreAI SEO Link Advisor - Less critical - Server-side Request Forgery - SA-CONTRIB-2025-095CVE-2025-8675Fix available8.8 High
- drupal googletag manager, googletag manager project manager +1 moreGoogleTag Manager - Moderately critical - Cross-site scripting - SA-CONTRIB-2025-094CVE-2025-8362Fix available6.1 Medium
- config pages project pages, drupal config pages +1 moreConfig Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-093CVE-2025-8361Fix available7.6 High
- cookies consent management project consent management, drupal cookies consent management +1 moreCOOKiES Consent Management - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-092CVE-2025-8092Fix available7.6 High
- drupal real-time seo for drupal, real-time seo project seo +1 moreReal-time SEO for Drupal - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-091CVE-2025-7716Fix available6.1 Medium
- block attributes project attributes, drupal block attributes +1 moreBlock Attributes - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-090CVE-2025-7715Fix available6.1 Medium
- drupal file download, file download project download +1 moreFile Download - Moderately critical - Access bypass - SA-CONTRIB-2025-089CVE-2025-7717Fix available7.5 High
- drupal mail loginMail Login - Critical - Access bypass - SA-CONTRIB-2025-088CVE-2025-7393Fix available9.8 Critical
- cookies addons project addons, drupal cookies addons +1 moreCookies Addons - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-087CVE-2025-7392Fix available6.1 Medium
- config pages viewer project pages viewer, drupal config pages viewer +1 moreConfig Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086CVE-2025-7031Fix available5.3 Medium
- drupal two-factor authentication (tfa), two-factor authentication project authentication +1 moreTwo-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085CVE-2025-7030Fix available6.5 Medium
- drupal paragraphs table, paragraphs table project table +1 moreParagraphs table - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-084CVE-2025-6677Fix available5.4 Medium
- drupal simple xml sitemapSimple XML sitemap - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-083CVE-2025-6676Fix available5.4 Medium
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-082CVE-2025-6675Fix available4.8 Medium
- drupal ckeditor5 youtubeCKEditor5 Youtube - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-081CVE-2025-6674Fix available6.1 Medium
- drupal klaro cookie & consent management, klaro cookie \& consent management project cookie \& consent management +1 moreKlaro Cookie & Consent Management - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-080CVE-2025-5682Fix available4.3 Medium
- drupal open socialOpen Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079CVE-2025-489218.8 High
- drupal glightboxGLightbox - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-078CVE-2025-48922Fix available6.1 Medium
- drupal toc.jsToc.js - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-077CVE-2025-48923Fix available6.1 Medium
- drupal cookies consent managementCOOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-076CVE-2025-48915Fix available8.6 High
- drupal cookies consent managementCOOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-075CVE-2025-48914Fix available8.6 High
- drupal etrackeretracker - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-074CVE-2025-48920Fix available7.3 High
- 1xinternet simple klaroSimple Klaro - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-073CVE-2025-48919Fix available5.0 Medium
- drupal eu cookie compliance (gdpr compliance), freelance-it-consultant eu cookie compliance +1 moreEU Cookie Compliance (GDPR Compliance) - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-072CVE-2025-48917Fix available5.0 Medium
- 1xinternet simple klaroSimple Klaro - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-071CVE-2025-48918Fix available8.8 High
- drupal bookable calendarBookable Calendar - Less critical - Access bypass - SA-CONTRIB-2025-070CVE-2025-48916Fix available6.5 Medium
- drupal lightgalleryLightgallery - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-069CVE-2025-48447Fix available7.1 High
- admin audit trail project audit trail, drupal admin audit trail +1 moreAdmin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-068CVE-2025-48448Fix available6.5 Medium
- commerce alphabank redirect project alphabank redirect, drupal commerce alphabank redirect +1 moreCommerce Alphabank Redirect - Moderately critical - Access bypass - SA-CONTRIB-2025-067CVE-2025-48446Fix available8.8 High
- drupal commerce eurobank (redirect), commerce eurobank \(redirect\) project eurobank \(redirect\) +1 moreCommerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066CVE-2025-48445Fix available8.8 High
- drupal quick node block, quick node block project node block +1 moreQuick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-065CVE-2025-48013Fix available5.3 Medium
- drupal quick node block, quick node block project node block +1 moreQuick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064CVE-2025-48444Fix available5.3 Medium
- drupal one time password, one time password project time password +1 moreOne Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-063CVE-2025-48012Fix available4.8 Medium
- drupal one time password, one time password project time password +1 moreOne Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-062CVE-2025-48011Fix available4.8 Medium
- drupal one time password, one time password project time password +1 moreOne Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061CVE-2025-48010Fix available4.8 Medium
- drupal single content sync, single content sync project content sync +1 moreSingle Content Sync - Moderately critical - Access bypass - SA-CONTRIB-2025-060CVE-2025-48009Fix available3.1 Low
- drupal events log track, events log track project log track +1 moreEvents Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059CVE-2025-4416Fix available7.5 High
- drupal piwik proPiwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058CVE-2025-4415Fix available4.8 Medium
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-056CVE-2025-47710Fix available7.4 High
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-055CVE-2025-47709Fix available6.5 Medium
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-054CVE-2025-47708Fix available8.8 High
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-053CVE-2025-47707Fix available7.5 High
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-052CVE-2025-47706Fix available4.8 Medium
- drupal iframe remove filter, iframe remove filter project remove filter +1 moreIFrame Remove Filter - Moderately critical - Cross site scripting - SA-CONTRIB-2025-051CVE-2025-47705Fix available6.1 Medium
- drupal klaro cookie & consent management, klaro cookie \& consent management project cookie \& consent management +1 moreKlaro Cookie & Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-050CVE-2025-47704Fix available6.1 Medium
- drupal cookies consent management, cookies consent manager project coonsent manager +1 moreCOOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-049CVE-2025-47703Fix available6.1 Medium
- drupal oembed providers, oembed providers project providers +1 moreoEmbed Providers - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-048CVE-2025-47702Fix available6.1 Medium
- drupal restrict route by ip, restrict route by ip project route by ip +1 moreRestrict route by IP - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-047CVE-2025-47701Fix available8.8 High
- backdropcms flagAn XSS issue was discovered in the Flag module before 1.x-3.6.2 for Backdrop CMS. Flag is a...CVE-2025-465956.4 Medium
- drunkenmonkey search api solrSearch API Solr - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-046CVE-2025-3907Fix available4.3 Medium
- Show moreLoading…