GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,087
Maven
5,000+
npm
3,751
NuGet
674
pip
3,437
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
808 advisories
Filter by severity
The Passwords Manager plugin for WordPress is vulnerable to unauthorized modification of data due...
High
Unreviewed
CVE-2024-12614
was published
Jan 16, 2025
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-11916
was published
Jan 8, 2025
Command injection in nevado-jms
High
CVE-2023-31826
was published
for
org.skyscreamer:nevado-jms
(Maven)
May 23, 2023
An issue in XINJE XL5E-16T V3.7.2a allows attackers to cause a Denial of Service (DoS) via a...
High
Unreviewed
CVE-2024-50953
was published
Jan 15, 2025
The Brizy – Page Builder plugin for WordPress is vulnerable to unauthorized modification of data...
High
Unreviewed
CVE-2024-1937
was published
Jul 16, 2024
The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a...
High
Unreviewed
CVE-2024-11848
was published
Jan 15, 2025
The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a...
High
Unreviewed
CVE-2024-12365
was published
Jan 14, 2025
Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5...
High
Unreviewed
CVE-2023-28657
was published
Jun 1, 2023
The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing...
High
Unreviewed
CVE-2024-12542
was published
Jan 9, 2025
The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a...
High
Unreviewed
CVE-2024-12848
was published
Jan 9, 2025
The Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem &...
High
Unreviewed
CVE-2024-11423
was published
Jan 8, 2025
The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file...
High
Unreviewed
CVE-2024-11270
was published
Jan 8, 2025
The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of...
High
Unreviewed
CVE-2024-11271
was published
Jan 8, 2025
The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code...
High
Unreviewed
CVE-2024-11816
was published
Jan 8, 2025
Missing Authorization vulnerability in Lenderd 1003 Mortgage Application allows Accessing...
High
Unreviewed
CVE-2025-22592
was published
Jan 7, 2025
The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can...
High
Unreviewed
CVE-2024-12202
was published
Jan 7, 2025
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-11725
was published
Jan 7, 2025
The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a...
High
Unreviewed
CVE-2024-12535
was published
Jan 7, 2025
WeGIA 3.2.0 before 3998672 does not verify permission to change a password.
High
Unreviewed
CVE-2024-53473
was published
Dec 8, 2024
Missing Authorization vulnerability in Crocoblock JetEngine allows Exploiting Incorrectly...
High
Unreviewed
CVE-2023-48758
was published
Jan 2, 2025
Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly...
High
Unreviewed
CVE-2023-47648
was published
Jan 2, 2025
Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly...
High
Unreviewed
CVE-2023-46632
was published
Jan 2, 2025
Missing Authorization vulnerability in WP Travel WP Travel allows Exploiting Incorrectly...
High
Unreviewed
CVE-2023-47224
was published
Jan 2, 2025
Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 allows...
High
Unreviewed
CVE-2023-47693
was published
Jan 2, 2025
Missing Authorization vulnerability in ByConsole WooODT Lite allows Exploiting Incorrectly...
High
Unreviewed
CVE-2023-47179
was published
Jan 2, 2025
ProTip!
Advisories are also available from the
GraphQL API