GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,133
Erlang
29
GitHub Actions
19
Go
1,940
Maven
5,000+
npm
3,677
NuGet
645
pip
3,295
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
1,446 advisories
Filter by severity
Subscriber Broken Access Control in Photo Gallery Builder <= 3.0 versions.
Moderate
Unreviewed
CVE-2024-49325
was published
Oct 20, 2024
The Bulk images optimizer: Resize, optimize, convert to webp, rename … plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-9361
was published
Oct 18, 2024
The SendGrid for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to...
Moderate
Unreviewed
CVE-2024-9364
was published
Oct 18, 2024
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to...
Moderate
Unreviewed
CVE-2022-4974
was published
Oct 16, 2024
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2023-7287
was published
Oct 16, 2024
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2023-7288
was published
Oct 16, 2024
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2023-7289
was published
Oct 16, 2024
The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit...
Moderate
Unreviewed
CVE-2024-45461
was published
Oct 16, 2024
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2023-7290
was published
Oct 16, 2024
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2023-7293
was published
Oct 16, 2024
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2023-7292
was published
Oct 16, 2024
The Premium Addons for Elementor plugin for WordPress is vulnerable to Arbitrary Option Updates...
Moderate
Unreviewed
CVE-2021-4445
was published
Oct 16, 2024
The Essential Addons for Elementor plugin for WordPress is vulnerable to authorization bypass in...
Moderate
Unreviewed
CVE-2021-4446
was published
Oct 16, 2024
The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to...
Moderate
Unreviewed
CVE-2020-36833
was published
Oct 16, 2024
The Discount Rules for WooCommerce plugin for WordPress is vulnerable to missing authorization...
Moderate
Unreviewed
CVE-2020-36834
was published
Oct 16, 2024
The Multiline files upload for contact form 7 plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2024-9891
was published
Oct 16, 2024
The Order Attachments for WooCommerce plugin for WordPress is vulnerable to unauthorized limited...
Moderate
Unreviewed
CVE-2024-9756
was published
Oct 12, 2024
The Read more By Adam plugin for WordPress is vulnerable to unauthorized loss of data due to a...
Moderate
Unreviewed
CVE-2024-9187
was published
Oct 12, 2024
The ImagePress – Image Gallery plugin for WordPress is vulnerable to unauthorized modification...
Moderate
Unreviewed
CVE-2024-9824
was published
Oct 12, 2024
The Bridge Core plugin for WordPress is vulnerable to unauthorized modification of data or loss...
Moderate
Unreviewed
CVE-2024-9860
was published
Oct 12, 2024
The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a...
Moderate
Unreviewed
CVE-2024-9586
was published
Oct 11, 2024
The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a...
Moderate
Unreviewed
CVE-2024-9587
was published
Oct 11, 2024
In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project...
Moderate
Unreviewed
CVE-2024-48902
was published
Oct 10, 2024
The UserPlus plugin for WordPress is vulnerable to unauthorized access, modification, and loss of...
Moderate
Unreviewed
CVE-2024-9520
was published
Oct 10, 2024
The WP Helper Premium plugin for WordPress is vulnerable to unauthorized modification of data due...
Moderate
Unreviewed
CVE-2024-9065
was published
Oct 10, 2024
ProTip!
Advisories are also available from the
GraphQL API