Skip to contentDrupal vulnerabilities
Products
Show 46 moreShow less
Newest
- drupal tinypngTinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246CVE-2026-114547Fix available3.7 Low
- drupal media alias displayMedia Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245CVE-2026-114546Fix available3.7 Low
- drupal fullcalendar viewFullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244CVE-2026-114545Fix available5.4 Medium
- drupal media bulk uploadMedia Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243CVE-2026-114544Fix available5.4 Medium
- drupal simple oauth (oauth2) & openid connectSimple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242CVE-2026-114542Fix available5.4 Medium
- drupal frontend editingFrontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241CVE-2026-114553Fix available5.4 Medium
- drupal frontend editingFrontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240CVE-2026-114541Fix available4.8 Medium
- drupal simple user managementSimple User Management - Moderately critical - Access bypass - SA-CONTRIB-2026-239CVE-2026-114543Fix available6.3 Medium
- drupal domainDomain - Moderately critical - Access bypass - SA-CONTRIB-2026-238CVE-2026-114540Fix available6.3 Medium
- bootstrapBootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236CVE-2026-114538Fix available7.1 High
- drupal view unpublishedView Unpublished - Moderately critical - Access bypass - SA-CONTRIB-2026-235CVE-2026-114537Fix available5.3 Medium
- drupal uswds paragraph componentsUSWDS Paragraph Components - Moderately critical - Cross site scripting - SA-CONTRIB-2026-234CVE-2026-114536Fix available6.5 Medium
- drupal swiper formatterSwiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233CVE-2026-114535Fix available5.3 Medium
- drupal block attributesBlock Attributes - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-232CVE-2026-114534Fix available5.9 Medium
- drupal ágora transparency themeÁgora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231CVE-2026-114533Fix available5.3 Medium
- drupal ui iconsUI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230CVE-2026-114532Fix available6.5 Medium
- drupal sector distributionSector Distribution - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-229CVE-2026-107260Fix available6.5 Medium
- drupal swiper formatterSwiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228CVE-2026-114531Fix available6.5 Medium
- drupal dopupDopup - Critical - Information disclosure - SA-CONTRIB-2026-227CVE-2026-114530Fix available5.3 Medium
- drupal csv fieldCSV Field - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-226CVE-2026-114529Fix available6.5 Medium
- drupal custom formattersCustom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225CVE-2026-114524Fix available7.2 High
- drupal abcABC - Critical - Cross-site scripting - SA-CONTRIB-2026-224CVE-2026-114525Fix available7.1 High
- drupal black holeBlack Hole - Critical - Cross-site scripting - SA-CONTRIB-2026-223CVE-2026-114526Fix available7.1 High
- drupal zero pointZero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222CVE-2026-114528Fix available7.1 High
- drupal ui iconsUI Icons - Critical - Cross site scripting - SA-CONTRIB-2026-221CVE-2026-114527Fix available7.1 High
- drupal ffmpeg image toolkitFfmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220CVE-2026-114523Fix available9.8 Critical
- drupal entity listEntity List - Critical - Remote code execution - SA-CONTRIB-2026-218CVE-2026-108099Fix available8.1 High
- drupal coreDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016CVE-2026-108514Fix available6.5 Medium
- drupal coreDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015CVE-2026-108515Fix available6.5 Medium
- drupal gin admin themeGin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219CVE-2026-110738Fix available6.5 Medium
- drupal coreDrupal core - Critical - Remote code execution - SA-CORE-2026-014CVE-2026-108097Public exploitFix available8.1 High
- drupal advanced filesystemAdvanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217CVE-2026-107262Fix available5.3 Medium
- drupal restrict route by ipRestrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216CVE-2026-107255Fix available7.3 High
- drupal examples for developersExamples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215CVE-2026-107312Fix available4.3 Medium
- drupal permissions by termPermissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214CVE-2026-107311Fix available3.7 Low
- drupal freelinkingFreelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213CVE-2026-107310Fix available4.3 Medium
- drupal easy breadcrumbEasy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212CVE-2026-107309Fix available3.7 Low
- drupal countryCountry - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211CVE-2026-107308Fix available3.1 Low
- drupal smartlinker aiSmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210CVE-2026-107307Fix available4.3 Medium
- drupal menu link attributesMenu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209CVE-2026-107306Fix available3.8 Low
- drupal dkanDKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208CVE-2026-107267Fix available5.3 Medium
- drupal two factor authentication - tfa / passwordless loginTwo Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207CVE-2026-107268Public exploitFix available4.3 Medium
- drupal xray auditXray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206CVE-2026-96389Fix available6.5 Medium
- drupal views shareViews Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205CVE-2026-107266Fix available5.3 Medium
- drupal leafletLeaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204CVE-2026-107265Fix available5.4 Medium
- drupal inline formatter fieldInline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203CVE-2026-107264Fix available5.4 Medium
- drupal gutenbergGutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202CVE-2026-107263Fix available5.4 Medium
- drupal authenticator login plus (2fa)Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201CVE-2026-107261Fix available4.2 Medium
- drupal linked fieldLinked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200CVE-2026-107259Fix available5.4 Medium
- drupal inline entity form dialogInline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199CVE-2026-107258Fix available5.4 Medium
- Show moreLoading…