Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
38
Go
2,831
Maven
5,000+
npm
4,462
NuGet
775
pip
4,226
Pub
12
RubyGems
972
Rust
1,093
Swift
47
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

286,035 advisories

Loading
A security flaw has been discovered in Open5GS up to 2.7.5. This issue affects some unknown... Moderate Unreviewed
CVE-2025-15532 was published Jan 17, 2026
A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function... Moderate Unreviewed
CVE-2025-15531 was published Jan 17, 2026
A weakness has been identified in LigeroSmart up to 6.1.26. Impacted is an unknown function of... Moderate Unreviewed
CVE-2026-1048 was published Jan 17, 2026
A vulnerability was determined in Open5GS up to 2.7.6. This affects the function... Moderate Unreviewed
CVE-2025-15530 was published Jan 17, 2026
The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to Stored Cross-Site Scripting... Moderate Unreviewed
CVE-2026-0725 was published Jan 17, 2026
The Registration & Login with Mobile Phone Number for WooCommerce plugin for WordPress is... Critical Unreviewed
CVE-2025-10484 was published Jan 17, 2026
The CubeWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's... Moderate Unreviewed
CVE-2025-8615 was published Jan 17, 2026
The PAYGENT for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all... Moderate Unreviewed
CVE-2025-14078 was published Jan 17, 2026
The Spin Wheel plugin for WordPress is vulnerable to client-side prize manipulation in all... Moderate Unreviewed
CVE-2026-0808 was published Jan 17, 2026
The Team Section Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... Moderate Unreviewed
CVE-2026-0833 was published Jan 17, 2026
The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2025-12129 was published Jan 17, 2026
The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to SQL Injection via... Moderate Unreviewed
CVE-2025-12984 was published Jan 17, 2026
The Demo Importer Plus plugin for WordPress is vulnerable to XML External Entity Injection (XXE)... High Unreviewed
CVE-2025-14478 was published Jan 17, 2026
The CM E-Mail Blacklist – Simple email filtering for safer registration plugin for WordPress is... Moderate Unreviewed
CVE-2026-0691 was published Jan 17, 2026
The Phrase TMS Integration for WordPress plugin for WordPress is vulnerable to unauthorized... Moderate Unreviewed
CVE-2025-12168 was published Jan 17, 2026
The Payment Button for PayPal plugin for WordPress is vulnerable to unauthorized order creation... Moderate Unreviewed
CVE-2025-14463 was published Jan 17, 2026
The Gutenberg Thim Blocks – Page Builder, Gutenberg Blocks for the Block Editor plugin for... Moderate Unreviewed
CVE-2025-13725 was published Jan 17, 2026
The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due... Moderate Unreviewed
CVE-2025-14029 was published Jan 17, 2026
The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all... Low Unreviewed
CVE-2026-0682 was published Jan 17, 2026
The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized... Moderate Unreviewed
CVE-2025-12825 was published Jan 17, 2026
The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is... Moderate Unreviewed
CVE-2026-0820 was published Jan 17, 2026
The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all... Moderate Unreviewed
CVE-2025-12002 was published Jan 17, 2026
The RegistrationMagic plugin for WordPress is vulnerable to Privilege Escalation in all versions... Critical Unreviewed
CVE-2025-15403 was published Jan 17, 2026
The Wallet System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification... Moderate Unreviewed
CVE-2025-14450 was published Jan 17, 2026
The WP Hotel Booking plugin for WordPress is vulnerable to Sensitive Information Exposure in all... Moderate Unreviewed
CVE-2025-14075 was published Jan 17, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database