Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,300
Erlang
31
GitHub Actions
21
Go
2,065
Maven
5,000+
npm
3,744
NuGet
668
pip
3,427
Pub
12
RubyGems
892
Rust
877
Swift
36
Unreviewed advisories
All unreviewed
5,000+

800 advisories

Loading
Missing Authorization vulnerability in theDotstore Advance Menu Manager.This issue affects... High Unreviewed
CVE-2024-54381 was published Dec 18, 2024
Missing Authorization vulnerability in VibeThemes WPLMS allows Accessing Functionality Not... High Unreviewed
CVE-2024-56048 was published Dec 18, 2024
The Custom Login Page Styler – Login Protected Private Site , Change wp-admin login url ,... High Unreviewed
CVE-2024-12594 was published Dec 24, 2024
The PlugVersions – Easily rollback to previous versions of your plugins plugin for WordPress is... High Unreviewed
CVE-2024-12881 was published Dec 24, 2024
Missing Authorization vulnerability in DeluxeThemes Userpro.This issue affects Userpro: from n/a... High Unreviewed
CVE-2024-56211 was published Dec 31, 2024
Missing Authorization vulnerability in Webful Creations Computer Repair Shop allows Privilege... High Unreviewed
CVE-2024-56061 was published Dec 31, 2024
Missing Authorization vulnerability in Azzaroco WP SuperBackup allows Exploiting Incorrectly... High Unreviewed
CVE-2024-56070 was published Dec 31, 2024
Missing Authorization vulnerability in Azzaroco WP SuperBackup allows Exploiting Incorrectly... High Unreviewed
CVE-2024-56067 was published Dec 31, 2024
Missing Authorization vulnerability in WPDeveloper BetterLinks allows Exploiting Incorrectly... High Unreviewed
CVE-2023-45104 was published Jan 2, 2025
Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly... High Unreviewed
CVE-2023-46632 was published Jan 2, 2025
Missing Authorization vulnerability in WP Travel WP Travel allows Exploiting Incorrectly... High Unreviewed
CVE-2023-47224 was published Jan 2, 2025
Missing Authorization vulnerability in ByConsole WooODT Lite allows Exploiting Incorrectly... High Unreviewed
CVE-2023-47179 was published Jan 2, 2025
Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 allows... High Unreviewed
CVE-2023-47693 was published Jan 2, 2025
Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly... High Unreviewed
CVE-2023-47648 was published Jan 2, 2025
Missing Authorization vulnerability in Crocoblock JetEngine allows Exploiting Incorrectly... High Unreviewed
CVE-2023-48758 was published Jan 2, 2025
WeGIA 3.2.0 before 3998672 does not verify permission to change a password. High Unreviewed
CVE-2024-53473 was published Dec 8, 2024
The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a... High Unreviewed
CVE-2024-12535 was published Jan 7, 2025
The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can... High Unreviewed
CVE-2024-12202 was published Jan 7, 2025
The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to... High Unreviewed
CVE-2024-11725 was published Jan 7, 2025
Missing Authorization vulnerability in Lenderd 1003 Mortgage Application allows Accessing... High Unreviewed
CVE-2025-22592 was published Jan 7, 2025
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to... High Unreviewed
CVE-2024-11916 was published Jan 8, 2025
The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code... High Unreviewed
CVE-2024-11816 was published Jan 8, 2025
The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file... High Unreviewed
CVE-2024-11270 was published Jan 8, 2025
The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of... High Unreviewed
CVE-2024-11271 was published Jan 8, 2025
The Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem &... High Unreviewed
CVE-2024-11423 was published Jan 8, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database