Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupal actstreamActstream - Critical - Access bypass - SA-CONTRIB-2026-198CVE-2026-107257Fix available6.5 Medium
- drupal authenticator login plus (2fa)Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197CVE-2026-107254Fix available4.8 Medium
- drupal orphans mediaOrphans Media - Critical - Unsupported - SA-CONTRIB-2026-196CVE-2026-1072535.9 Medium
- drupal mathjax: latex for drupalMathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195CVE-2026-107252Fix available5.4 Medium
- drupal entity reference manager (merge entities)Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194CVE-2026-107251Fix available6.5 Medium
- drupal eca helperECA Helper - Critical - Unsupported - SA-CONTRIB-2026-193CVE-2026-1072505.9 Medium
- drupal block ajaxBlock AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192CVE-2026-107249Fix available9.8 Critical
- drupal diba carousel sliderDiba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191CVE-2026-96382Fix available4.6 Medium
- drupal smart contentSmart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190CVE-2026-96386Fix available6.5 Medium
- drupal css usage analyzerCSS Usage Analyzer - Moderately critical - Improper access control - SA-CONTRIB-2026-189CVE-2026-96380Fix available6.5 Medium
- drupal combined image styleCombined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188CVE-2026-96377Fix available5.3 Medium
- drupal ai ckeditorAI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187CVE-2026-96392Fix available3.5 Low
- drupal webform restWebform REST - Less critical - Access bypass - SA-CONTRIB-2026-186CVE-2026-96391Fix available4.3 Medium
- drupal editoria11y accessibility checkerEditoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185CVE-2026-96390Fix available4.3 Medium
- drupal tawk.to - live chat applicationTawk.to - Live chat application - Critical - Cross Site Request Forgery - SA-CONTRIB-2026-184CVE-2026-96388Fix available5.4 Medium
- drupal stop administrator loginStop administrator login - Moderately critical - Access bypass - SA-CONTRIB-2026-183CVE-2026-96387Fix available3.8 Low
- drupal rest & json api authentication for drupalREST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182CVE-2026-96385Fix available6.5 Medium
- drupal cookiecuttrCookieCuttr - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-181CVE-2026-96379Fix available3.5 Low
- drupal mermaid diagram fieldMermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180CVE-2026-96384Fix available3.5 Low
- drupal commerce decoupled checkoutCommerce Decoupled Checkout - Moderately critical - Access bypass - SA-CONTRIB-2026-179CVE-2026-96378Fix available4.3 Medium
- drupal project browserProject Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178CVE-2026-96374Fix available4.2 Medium
- cisco cloudCloud - Critical - Remote code execution - SA-CONTRIB-2026-177CVE-2026-96376Fix available6.4 Medium
- cisco cloudCloud - Critical - Remote code execution - SA-CONTRIB-2026-176CVE-2026-96375Fix available4.8 Medium
- drupal webformWebform - Critical - Remote Code Execution - SA-CONTRIB-2026-175CVE-2026-96355Fix available9.1 Critical
- drupal webformWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-174CVE-2026-96356Fix available5.3 Medium
- drupal webformWebform - Less critical - Access bypass - SA-CONTRIB-2026-173CVE-2026-96398Fix available4.3 Medium
- drupal webformWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172CVE-2026-96357Fix available4.6 Medium
- drupal webformWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-171CVE-2026-96364Fix available5.3 Medium
- drupal webformWebform - Less critical - Denial of service - SA-CONTRIB-2026-170CVE-2026-96365Fix available7.5 High
- drupal webformWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-169CVE-2026-96366Fix available5.3 Medium
- drupal webformWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-168CVE-2026-96373Fix available3.3 Low
- drupal webformWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-167CVE-2026-96372Fix available5.4 Medium
- drupal webformWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166CVE-2026-96371Fix available5.4 Medium
- drupal webformWebform - Less critical - Access bypass - SA-CONTRIB-2026-165CVE-2026-96369Fix available3.1 Low
- drupal webformWebform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164CVE-2026-96370Fix available5.4 Medium
- drupal webformWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163CVE-2026-96368Fix available4.6 Medium
- drupal webformWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162CVE-2026-96367Fix available4.6 Medium
- drupal webformWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161CVE-2026-96363Fix available3.1 Low
- drupal webformWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160CVE-2026-96362Fix available4.2 Medium
- drupal webformWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159CVE-2026-96359Fix available4.6 Medium
- drupal webformWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158CVE-2026-96358Fix available4.6 Medium
- drupal webformWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155CVE-2026-96361Fix available4.6 Medium
- drupal webformWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154CVE-2026-96360Fix available3.5 Low
- drupal ultimate table fieldUltimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153CVE-2026-87955Fix available4.3 Medium
- drupal taxonomy term glossaryTaxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152CVE-2026-87954Fix available4.3 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151CVE-2026-87953Fix available3.3 Low
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150CVE-2026-87952Fix available3.1 Low
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149CVE-2026-87951Fix available3.8 Low
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148CVE-2026-87950Fix available5.3 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147CVE-2026-87949Fix available3.3 Low
- Show moreLoading…