GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,335
Erlang
31
GitHub Actions
22
Go
2,096
Maven
5,000+
npm
3,762
NuGet
678
pip
3,448
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+
3,741 advisories
Filter by severity
Missing Authorization vulnerability in WPForms Contact Form by WPForms allows Exploiting...
Moderate
Unreviewed
CVE-2024-56276
was published
Jan 7, 2025
Missing Authorization vulnerability in POSIMYTH Nexter Blocks allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2024-56294
was published
Jan 7, 2025
Missing Authorization vulnerability in Hive Support Hive Support – WordPress Help Desk allows...
Moderate
Unreviewed
CVE-2025-22298
was published
Jan 7, 2025
Missing Authorization vulnerability in WPvivid Backup & Migration WPvivid Backup and Migration...
Moderate
Unreviewed
CVE-2024-56273
was published
Jan 7, 2025
Missing Authorization vulnerability in spacecodes AI for SEO allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-22299
was published
Jan 7, 2025
Missing Authorization vulnerability in CubeWP CubeWP Forms – All-in-One Form Builder allows...
Moderate
Unreviewed
CVE-2024-51651
was published
Jan 7, 2025
The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due...
Moderate
Unreviewed
CVE-2024-12719
was published
Jan 7, 2025
The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can...
High
Unreviewed
CVE-2024-12202
was published
Jan 7, 2025
The Export Import Menus plugin for WordPress is vulnerable to unauthorized access of data due to...
Moderate
Unreviewed
CVE-2024-10866
was published
Jan 7, 2025
The Aurum - WordPress & WooCommerce Shopping Theme theme for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-12781
was published
Jan 7, 2025
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-11725
was published
Jan 7, 2025
The FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg &...
Moderate
Unreviewed
CVE-2024-10536
was published
Jan 7, 2025
The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2024-9697
was published
Jan 7, 2025
The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a...
High
Unreviewed
CVE-2024-12535
was published
Jan 7, 2025
The LazyLoad Background Images plugin for WordPress is vulnerable to unauthorized modification of...
Moderate
Unreviewed
CVE-2024-12327
was published
Jan 7, 2025
The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to unauthorized access...
Moderate
Unreviewed
CVE-2024-12176
was published
Jan 7, 2025
The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-12158
was published
Jan 7, 2025
The Spacer plugin for WordPress is vulnerable to unauthorized access of data due to a missing...
Low
Unreviewed
CVE-2024-10527
was published
Jan 7, 2025
The Infility Global plugin for WordPress is vulnerable to unauthorized modification of data due...
Moderate
Unreviewed
CVE-2024-11496
was published
Jan 7, 2025
The ClickDesigns plugin for WordPress is vulnerable to unauthorized modification of data due to a...
Moderate
Unreviewed
CVE-2024-12559
was published
Jan 7, 2025
The WP Menu Image plugin for WordPress is vulnerable to unauthorized modification of data due to...
Moderate
Unreviewed
CVE-2024-12022
was published
Jan 7, 2025
An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created...
Moderate
Unreviewed
CVE-2025-22385
was published
Jan 4, 2025
Missing Authorization vulnerability in WeyHan Ng Post Teaser.This issue affects Post Teaser: from...
Moderate
Unreviewed
CVE-2022-45811
was published
Jan 2, 2025
Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2022-47601
was published
Jan 2, 2025
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP:...
Moderate
Unreviewed
CVE-2023-23672
was published
Jan 2, 2025
ProTip!
Advisories are also available from the
GraphQL API