GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,359
Erlang
33
GitHub Actions
22
Go
2,126
Maven
5,000+
npm
3,787
NuGet
683
pip
3,467
Pub
12
RubyGems
894
Rust
892
Swift
38
Unreviewed advisories
All unreviewed
5,000+
3,872 advisories
Filter by severity
The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and...
Moderate
Unreviewed
CVE-2024-13639
was published
Feb 13, 2025
A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an...
Moderate
Unreviewed
CVE-2025-1214
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...
High
Unreviewed
CVE-2025-26375
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...
High
Unreviewed
CVE-2025-26368
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...
Moderate
Unreviewed
CVE-2025-26367
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...
Moderate
Unreviewed
CVE-2025-26376
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...
High
Unreviewed
CVE-2025-26378
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...
High
Unreviewed
CVE-2025-26371
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...
High
Unreviewed
CVE-2025-26372
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...
High
Unreviewed
CVE-2025-26370
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...
High
Unreviewed
CVE-2025-26369
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...
High
Unreviewed
CVE-2025-26377
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (users endpoint) in Q-Free...
Moderate
Unreviewed
CVE-2025-26374
was published
Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (user endpoint) in Q-Free...
Moderate
Unreviewed
CVE-2025-26373
was published
Feb 12, 2025
The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that...
High
Unreviewed
CVE-2024-12296
was published
Feb 12, 2025
The WP Table Manager plugin for WordPress is vulnerable to unauthorized access due to a missing...
Moderate
Unreviewed
CVE-2024-13374
was published
Feb 12, 2025
The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-13656
was published
Feb 12, 2025
The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can...
High
Unreviewed
CVE-2024-13800
was published
Feb 12, 2025
The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is...
Moderate
Unreviewed
CVE-2024-13769
was published
Feb 12, 2025
The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-13653
was published
Feb 12, 2025
The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-13654
was published
Feb 12, 2025
The WPSyncSheets Lite For WPForms – WPForms Google Spreadsheet Addon plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-12164
was published
Feb 12, 2025
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-13554
was published
Feb 12, 2025
The aDirectory – WordPress Directory Listing Plugin plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-13541
was published
Feb 12, 2025
The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-13643
was published
Feb 11, 2025
ProTip!
Advisories are also available from the
GraphQL API