Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

816 advisories

Loading
The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify that the... Moderate Unreviewed
CVE-2026-15214 was published Aug 7, 2026
The MStore API WordPress plugin before 4.21.0 does not restrict its vendor-orders endpoint to... Moderate Unreviewed
CVE-2026-16039 was published Aug 7, 2026
The Events Made Easy WordPress plugin before 3.1.2 does not bind the payment authorization token... Moderate Unreviewed
CVE-2026-14842 was published Aug 7, 2026
The Tutor LMS WordPress plugin before 3.9.14 does not properly verify enrollment when restricting... Moderate Unreviewed
CVE-2026-14306 was published Aug 7, 2026
Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium... Moderate Unreviewed
CVE-2026-18275 was published Aug 6, 2026
Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison... Moderate Unreviewed
CVE-2026-66692 was published Aug 6, 2026
Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce... Moderate Unreviewed
CVE-2026-28180 was published Aug 6, 2026
When secondary user stores are configured, the implicit-association resolver incorrectly... Moderate Unreviewed
CVE-2025-11850 was published Aug 6, 2026
Improper Input Validation vulnerability in Apache Answer. This issue affects Apache Answer:... Moderate Unreviewed
CVE-2026-48912 was published Aug 5, 2026
Akaunting's shared download route (app/Http/Controllers/Common/Uploads.php::download(), reachable... Moderate Unreviewed
CVE-2026-71251 was published Aug 5, 2026
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-11454 was published Aug 5, 2026
The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not perform any... Moderate Unreviewed
CVE-2026-16981 was published Aug 5, 2026
Admidio before 5.0.11 contains an insecure direct object reference vulnerability in the... Moderate Unreviewed
CVE-2026-69094 was published Aug 3, 2026
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9... Moderate Unreviewed
CVE-2026-16565 was published Aug 3, 2026
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9... Moderate Unreviewed
CVE-2026-16564 was published Aug 3, 2026
The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check... Moderate Unreviewed
CVE-2026-15260 was published Aug 3, 2026
The ProfileGrid WordPress plugin before 5.9.9.8 does not verify that a notification belongs to... Moderate Unreviewed
CVE-2026-16291 was published Aug 2, 2026
The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a... Moderate Unreviewed
CVE-2026-14938 was published Aug 2, 2026
The WooCommerce PayPal Payments plugin for WordPress is vulnerable to Sensitive Information... Moderate Unreviewed
CVE-2025-14073 was published Aug 1, 2026
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin... Moderate Unreviewed
CVE-2026-17567 was published Jul 31, 2026
The BuddyPress WordPress plugin before 14.5.0 does not properly enforce authorization on its... Moderate Unreviewed
CVE-2026-8155 was published Jul 31, 2026
The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not perform capability or... Moderate Unreviewed
CVE-2026-14847 was published Jul 31, 2026
The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is... Moderate Unreviewed
CVE-2026-14843 was published Jul 31, 2026
The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the... Moderate Unreviewed
CVE-2026-15209 was published Jul 31, 2026
The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records... Moderate Unreviewed
CVE-2026-12376 was published Jul 31, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database