Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupal gammu sms daemonGammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100CVE-2026-767555.9 Medium
- drupal quick tabs, quick tabs project tabs +1 moreQuick Tabs - Moderately critical - Access bypass - SA-CONTRIB-2026-099CVE-2026-73477Fix available5.3 Medium
- drupal external authentication, external authentication project authentication +1 moreExternal Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098CVE-2026-73476Fix available5.4 Medium
- drupal entity share websub, entity share websub project share websub +1 moreEntity Share Websub - Moderately critical - Server-side request forgery (SSRF) - SA-CONTRIB-2026-097CVE-2026-73474Fix available5.3 Medium
- diff project diffDiff - Moderately critical - Access bypass - SA-CONTRIB-2026-096CVE-2026-73478Fix available5.3 Medium
- centarro commerce paypalCommerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095CVE-2026-73475Fix available9.1 Critical
- drupal entity browser, entity browser project browser +1 moreEntity Browser - Moderately critical - Cross site scripting - SA-CONTRIB-2026-094CVE-2026-18986Fix available4.8 Medium
- drupal edit in-place fieldEdit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093CVE-2026-18985Fix available8.1 High
- drupal disable login pageDisable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110CVE-2026-18260Fix available5.7 Medium
- drupal token content accessToken Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090CVE-2026-18259Fix available7.5 High
- drupal development environmentDevelopment Environment - Critical - Unsupported - SA-CONTRIB-2026-089CVE-2026-150885.7 Medium
- drupal photoswipe - responsive javascript modal image galleryPhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088CVE-2026-16645Fix available9.1 Critical
- drupal webform restWebform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087CVE-2026-16644Fix available9.1 Critical
- drupal lunr exposed filtersLunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086CVE-2026-166435.7 Medium
- drupal email login otpEmail Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085CVE-2026-166425.7 Medium
- drupal commerce elavonCommerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084CVE-2026-166419.8 Critical
- drupal search api autocompleteSearch API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082CVE-2026-16640Fix available6.1 Medium
- drupal internationalization single sign-onInternationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081CVE-2026-16639Fix available9.8 Critical
- drupal media foldersMedia Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080CVE-2026-16638Fix available6.1 Medium
- drupal coreDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012CVE-2026-55805Fix available5.4 Medium
- drupal coreDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011CVE-2026-15917Fix available4.7 Medium
- drupal coreDrupal core - Moderately critical - Information disclosure - SA-CORE-2026-010CVE-2026-15916Fix available4.2 Medium
- drupal commerce guest registrationCommerce guest registration - Critical - Unsupported - SA-CONTRIB-2026-079CVE-2026-150899.1 Critical
- drupal clean restfulClean RESTful - Critical - Unsupported - SA-CONTRIB-2026-078CVE-2026-150875.9 Medium
- drupal raw formatter [meta tag formatter]Raw Formatter [Meta Tag Formatter] - Critical - Unsupported - SA-CONTRIB-2026-077CVE-2026-150865.9 Medium
- drupal ai seo/geo analyzer, j-vee ai seo\/geo analyzer +1 moreAI SEO/GEO Analyzer - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-076CVE-2026-15085Fix available5.4 Medium
- ademarco ui patterns, drupal ui patterns (sdc in drupal ui) +1 moreUI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075CVE-2026-15084Fix available5.4 Medium
- drupal eca: event - condition - action, jurgenhaas eca\ +1 moreECA: Event - Condition - Action - Less critical - Information disclosure - SA-CONTRIB-2026-074CVE-2026-15083Fix available4.2 Medium
- drupal siteimprove analyticsSiteimprove Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-073CVE-2026-15082Fix available5.4 Medium
- drupal location selectorLocation Selector - Critical - SQL Injection - SA-CONTRIB-2026-072CVE-2026-15081Fix available7.4 High
- drupal ray enterprise translationRay Enterprise Translation - Moderately critical - Cross site request forgery - SA-CONTRIB-2026-071CVE-2026-15080Fix available4.3 Medium
- budda login disableLogin Disable - Moderately critical - Access bypass - SA-CONTRIB-2026-070CVE-2026-15079Fix available5.4 Medium
- colorbox project colorboxColorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069CVE-2026-58591Fix available5.4 Medium
- drupal flowdropFlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-068CVE-2026-58590Fix available5.4 Medium
- drupal flowdropFlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-067CVE-2026-58589Fix available5.4 Medium
- drupal canvasDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066CVE-2026-58588Fix available6.1 Medium
- drupal canvasDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065CVE-2026-58587Fix available6.1 Medium
- dakku tealium iq tag managementTealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064CVE-2026-13244Fix available8.1 High
- drupal salesforce suiteSalesforce Suite - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-063CVE-2026-13243Fix available4.8 Medium
- dopry geolocation fieldGeolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062CVE-2026-13242Fix available6.5 Medium
- drupal paragraphsParagraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061CVE-2026-13241Fix available6.5 Medium
- drupal paragraphsParagraphs - Less critical - Access bypass - SA-CONTRIB-2026-060CVE-2026-13240Fix available6.5 Medium
- drupal wisskiWissKI - Critical - Access bypass - SA-CONTRIB-2026-059CVE-2026-13239Fix available6.5 Medium
- drupal commerce realex / global payments, stella commerce realex \/ global payments +1 moreCommerce Realex / Global Payments - Moderately critical - Access Bypass - SA-CONTRIB-2026-058CVE-2026-13238Fix available4.8 Medium
- drupal ai agents, artificial intelligence project intelligence +1 moreAI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057CVE-2026-13237Fix available4.8 Medium
- drupal ai agents, artificial intelligence project intelligence +1 moreAI Agents - Less critical - Access bypass - SA-CONTRIB-2026-056CVE-2026-13236Fix available4.2 Medium
- artificial intelligence project intelligence, drupal ai (artificial intelligence) +1 moreAI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055CVE-2026-13235Fix available3.3 Low
- artificial intelligence project intelligence, drupal ai (artificial intelligence) +1 moreAI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054CVE-2026-13234Fix available6.1 Medium
- drupal openai provider, openai provider project provider +1 moreOpenAI Provider - Moderately critical - Server-side Request Forgery - SA-CONTRIB-2026-053CVE-2026-13233Public exploitFix available3.3 Low
- anuaralfetahe advanced content feedback, drupal advanced content feedback (aka admin feedback) +1 moreAdvanced Content Feedback (aka admin_feedback) - Moderately critical - Access bypass / Insecure Direct Object Reference (IDOR) - SA-CONTRIB-2026-052CVE-2026-13232Fix available3.1 Low
- Show moreLoading…