GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,360
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,793
NuGet
683
pip
3,471
Pub
12
RubyGems
894
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+
2,736 advisories
Filter by severity
Missing Authorization vulnerability in theDotstore Hide Shipping Method For WooCommerce. This...
Moderate
Unreviewed
CVE-2025-22694
was published
Feb 3, 2025
The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access...
Moderate
Unreviewed
CVE-2024-13775
was published
Feb 1, 2025
The MagicForm plugin for WordPress is vulnerable to access and modification of data due to a...
Moderate
Unreviewed
CVE-2025-0939
was published
Feb 1, 2025
The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification...
Moderate
Unreviewed
CVE-2024-12825
was published
Feb 1, 2025
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for...
Moderate
Unreviewed
CVE-2024-13371
was published
Feb 1, 2025
The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-13651
was published
Feb 1, 2025
The AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations plugin for...
Moderate
Unreviewed
CVE-2024-12620
was published
Feb 1, 2025
The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access...
Moderate
Unreviewed
CVE-2024-12184
was published
Feb 1, 2025
The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-12267
was published
Jan 31, 2025
Missing Authorization vulnerability in MagePeople Team Booking and Rental Manager allows...
Moderate
Unreviewed
CVE-2025-22720
was published
Jan 31, 2025
Missing Authorization vulnerability in mgplugin EMI Calculator allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-22265
was published
Jan 31, 2025
The Custom Login Page Styler – Limit Login Attempts – Restrict Content With Login – Redirect...
Moderate
Unreviewed
CVE-2024-13530
was published
Jan 31, 2025
The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2024-13717
was published
Jan 31, 2025
The Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-13415
was published
Jan 31, 2025
The Ni Sales Commission For WooCommerce plugin for WordPress is vulnerable to unauthorized access...
Moderate
Unreviewed
CVE-2024-13424
was published
Jan 31, 2025
The zStore Manager Basic plugin for WordPress is vulnerable to unauthorized loss of data due to a...
Moderate
Unreviewed
CVE-2024-13715
was published
Jan 30, 2025
The ECPay Ecommerce for WooCommerce plugin for WordPress is vulnerable to unauthorized loss of...
Moderate
Unreviewed
CVE-2024-13652
was published
Jan 30, 2025
The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for...
Moderate
Unreviewed
CVE-2024-11583
was published
Jan 30, 2025
IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1...
Moderate
Unreviewed
CVE-2022-43916
was published
Jan 30, 2025
The issue was addressed with improved access restrictions to the file system. This issue is fixed...
Moderate
Unreviewed
CVE-2025-24143
was published
Jan 28, 2025
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2025-24116
was published
Jan 28, 2025
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia...
Moderate
Unreviewed
CVE-2025-24096
was published
Jan 28, 2025
Missing Authorization vulnerability in Haptiq picu – Online Photo Proofing Gallery allows...
Moderate
Unreviewed
CVE-2025-24590
was published
Jan 27, 2025
Missing Authorization vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows...
Moderate
Unreviewed
CVE-2025-24653
was published
Jan 27, 2025
Missing Authorization vulnerability in NotFound LearnDash LMS allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-24662
was published
Jan 27, 2025
ProTip!
Advisories are also available from the
GraphQL API