GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,344
Erlang
31
GitHub Actions
22
Go
2,109
Maven
5,000+
npm
3,765
NuGet
680
pip
3,453
Pub
12
RubyGems
892
Rust
887
Swift
37
Unreviewed advisories
All unreviewed
5,000+
2,670 advisories
Filter by severity
The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing...
Moderate
Unreviewed
CVE-2024-11133
was published
Feb 3, 2025
The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing...
Moderate
Unreviewed
CVE-2024-11134
was published
Feb 3, 2025
Missing Authorization vulnerability in theme funda Setup Default Featured Image allows Exploiting...
Moderate
Unreviewed
CVE-2025-24642
was published
Feb 3, 2025
Missing Authorization vulnerability in Amento Tech Pvt ltd WPGuppy allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-24643
was published
Feb 3, 2025
Missing Authorization vulnerability in Realwebcare Image Gallery – Responsive Photo Gallery...
Moderate
Unreviewed
CVE-2025-24697
was published
Feb 3, 2025
Missing Authorization vulnerability in Hemnath Mouli WC Wallet allows Accessing Functionality Not...
Moderate
Unreviewed
CVE-2025-23527
was published
Feb 3, 2025
Missing Authorization vulnerability in By Averta Shortcodes and extra features for Phlox theme...
Moderate
Unreviewed
CVE-2024-50500
was published
Feb 3, 2025
Missing Authorization vulnerability in UIUX Lab Uix Shortcodes allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-22677
was published
Feb 3, 2025
Missing Authorization vulnerability in theDotstore Hide Shipping Method For WooCommerce. This...
Moderate
Unreviewed
CVE-2025-22694
was published
Feb 3, 2025
Missing Authorization vulnerability in Pixelite Meta Tag Manager. This issue affects Meta Tag...
Moderate
Unreviewed
CVE-2025-22260
was published
Feb 3, 2025
Missing Authorization vulnerability in Xfinity Soft Content Cloner allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-22681
was published
Feb 3, 2025
Missing Authorization vulnerability in GSheetConnector CF7 Google Sheets Connector allows...
Moderate
Unreviewed
CVE-2025-22686
was published
Feb 3, 2025
The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access...
Moderate
Unreviewed
CVE-2024-13775
was published
Feb 1, 2025
The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification...
Moderate
Unreviewed
CVE-2024-12825
was published
Feb 1, 2025
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for...
Moderate
Unreviewed
CVE-2024-13371
was published
Feb 1, 2025
The MagicForm plugin for WordPress is vulnerable to access and modification of data due to a...
Moderate
Unreviewed
CVE-2025-0939
was published
Feb 1, 2025
The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access...
Moderate
Unreviewed
CVE-2024-12184
was published
Feb 1, 2025
The AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations plugin for...
Moderate
Unreviewed
CVE-2024-12620
was published
Feb 1, 2025
The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-13651
was published
Feb 1, 2025
The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-12267
was published
Jan 31, 2025
Missing Authorization vulnerability in MagePeople Team Booking and Rental Manager allows...
Moderate
Unreviewed
CVE-2025-22720
was published
Jan 31, 2025
Missing Authorization vulnerability in mgplugin EMI Calculator allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-22265
was published
Jan 31, 2025
The Custom Login Page Styler – Limit Login Attempts – Restrict Content With Login – Redirect...
Moderate
Unreviewed
CVE-2024-13530
was published
Jan 31, 2025
The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2024-13717
was published
Jan 31, 2025
The Ni Sales Commission For WooCommerce plugin for WordPress is vulnerable to unauthorized access...
Moderate
Unreviewed
CVE-2024-13424
was published
Jan 31, 2025
ProTip!
Advisories are also available from the
GraphQL API