Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146CVE-2026-87948Fix available3.5 Low
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145CVE-2026-87947Fix available4.8 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144CVE-2026-87946Fix available4.8 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143CVE-2026-87945Fix available5.4 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142CVE-2026-87944Fix available4.8 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141CVE-2026-87943Fix available6.5 Medium
- drupal safedeleteSafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140CVE-2026-87942Fix available4.6 Medium
- drupal key authKey auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138CVE-2026-87940Fix available5.4 Medium
- drupal feed blockFeed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137CVE-2026-87939Fix available4.2 Medium
- drupal csp logCSP log - Critical - SQL Injection - SA-CONTRIB-2026-136CVE-2026-87938Fix available6.5 Medium
- drupal central authentication system (cas) serverCentral Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135CVE-2026-87937Fix available6.5 Medium
- drupal amazee.ai private ai provideramazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134CVE-2026-87936Fix available6.5 Medium
- drupal webform submissions deleteWebform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133CVE-2026-84921Fix available5.3 Medium
- drupal unpublished node permissionsUnpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-132CVE-2026-84920Fix available5.3 Medium
- drupal photoswipe - responsive javascript modal image galleryPhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131CVE-2026-84919Fix available4.6 Medium
- drupal monobank payment apiMonobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130CVE-2026-84918Fix available3.7 Low
- drupal media library importerMedia Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129CVE-2026-81163Fix available5.4 Medium
- drupal mailer plus logMailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128CVE-2026-16648Fix available3.8 Low
- drupal jsonapi role accessJsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127CVE-2026-84917Fix available6.5 Medium
- drupal islandoraIslandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126CVE-2026-84916Fix available3.7 Low
- drupal email verification / sms verification / otp verificationEmail Verification / SMS Verification / OTP Verification - Critical - Cross Site Scripting - SA-CONTRIB-2026-125CVE-2026-84924Fix available5.4 Medium
- drupal email verification / sms verification / otp verificationEmail Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124CVE-2026-84923Fix available6.5 Medium
- drupal component blocksComponent blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123CVE-2026-84915Fix available4.6 Medium
- drupal calculate working daysCalculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122CVE-2026-84914Fix available5.3 Medium
- drupal ai translateAI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121CVE-2026-84913Fix available4.6 Medium
- drupal ai (artificial intelligence)AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120CVE-2026-84912Fix available4.6 Medium
- drupal ai (artificial intelligence)AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119CVE-2026-84911Fix available3.1 Low
- drupal advanced searchAdvanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118CVE-2026-84910Fix available4.2 Medium
- drupal persistent loginPersistent Login <= 3.1.0 - Authenticated (Subscriber+) SQL Injection via 'wppl_device_id' CookieCVE-2026-187526.5 Medium
- drupal slick carousel, slick carousel project carousel +1 moreSlick Carousel - Moderately critical - Cross Site Scripting - SA-CONTRIB-2026-117CVE-2026-81160Fix available6.1 Medium
- drupal monster menus, monster menus project menus +1 moreMonster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-116CVE-2026-81201Fix available6.1 Medium
- drupal ldap / active directory integration, miniorange ldap \/ active directory integration +1 moreLDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115CVE-2026-81205Fix available5.3 Medium
- drupal entity pdf, entity pdf project pdf +1 moreEntity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-114CVE-2026-81164Fix available5.4 Medium
- drupal entity api, entity api project api +1 moreEntity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-113CVE-2026-81158Fix available5.3 Medium
- drupal dxpr builder: the best editing (ai) experience for drupal, dxpr builder project builder +1 moreDXPR Builder: The AI Visual Page Builder for Drupal - Moderately critical - Information Disclosure - SA-CONTRIB-2026-112CVE-2026-81162Fix available5.3 Medium
- drupal disable login pageDisable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-111CVE-2026-16647Fix available4.1 Medium
- drupal digital signage frameworkDigital Signage Framework - Moderately critical - Access bypass - SA-CONTRIB-2026-109CVE-2026-81166Fix available5.3 Medium
- data field project field, drupal data field +1 moreData field - Moderately critical - Information disclosure - SA-CONTRIB-2026-108CVE-2026-81269Fix available5.3 Medium
- content moderation notifications project moderation notifications, drupal content moderation notifications +1 moreContent Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-107CVE-2026-81161Fix available3.3 Low
- centarro commerce cybersourceCommerce CyberSource - Moderately critical - Insufficient input validation - SA-CONTRIB-2026-106CVE-2026-81159Fix available3.7 Low
- captcha protected page project protected page, drupal captcha protected page +1 moreCAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105CVE-2026-81168Fix available3.7 Low
- blazy project blazyBlazy - Less critical - Access bypass - SA-CONTRIB-2026-104CVE-2026-81165Fix available5.3 Medium
- address suggestion project suggestion, drupal address suggestion +1 moreAddress Suggestion - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-103CVE-2026-81167Fix available4.8 Medium
- drupal pankmPanKM - Critical - Unsupported - SA-CONTRIB-2026-083CVE-2026-166465.7 Medium
- drupal powerful surveysPowerful Surveys - Critical - Unsupported - SA-CONTRIB-2026-092CVE-2026-182615.7 Medium
- drupal screenshotScreenshot - Critical - Unsupported - SA-CONTRIB-2026-102CVE-2026-767827.3 High
- drupal screenshotScreenshot - Critical - Unsupported - SA-CONTRIB-2026-102CVE-2026-767597.3 High
- drupal link content parserLink content parser - Critical - Unsupported - SA-CONTRIB-2026-101CVE-2026-767585.9 Medium
- drupal gammu sms daemonGammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100CVE-2026-767575.9 Medium
- drupal gammu sms daemonGammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100CVE-2026-767565.9 Medium
- Show moreLoading…