GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,785
Erlang
36
GitHub Actions
29
Go
2,358
Maven
5,000+
npm
3,979
NuGet
720
pip
3,777
Pub
12
RubyGems
924
Rust
981
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
67 advisories
Filter by severity
Cross-Site Request Forgery (CSRF) vulnerability in sh1zen WP Optimizer allows SQL Injection. This...
Critical
Unreviewed
CVE-2025-53314
was published
Jun 27, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Danny Vink User Profile Meta Manager allows...
Critical
Unreviewed
CVE-2025-48340
was published
May 19, 2025
The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF...
Critical
Unreviewed
CVE-2025-2907
was published
Apr 26, 2025
The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing...
Critical
Unreviewed
CVE-2017-16780
was published
May 13, 2022
Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP allows Remote...
Critical
Unreviewed
CVE-2025-39601
was published
Apr 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell...
Critical
Unreviewed
CVE-2025-30967
was published
Apr 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Agence web Eoxia - Montpellier WP shop allows...
Critical
Unreviewed
CVE-2025-32576
was published
Apr 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Uncodethemes Ultra Demo Importer allows Upload...
Critical
Unreviewed
CVE-2025-32496
was published
Apr 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in appsbd Vite Coupon allows Remote Code...
Critical
Unreviewed
CVE-2025-32642
was published
Apr 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in anantaddons Anant Addons for Elementor allows...
Critical
Unreviewed
CVE-2025-32641
was published
Apr 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Adam Nowak Buddypress Humanity allows Cross...
Critical
Unreviewed
CVE-2025-31033
was published
Apr 9, 2025
eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an...
Critical
Unreviewed
CVE-2024-44677
was published
Sep 10, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Jacob Schwartz WP e-Commerce Style Email...
Critical
Unreviewed
CVE-2025-30615
was published
Mar 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in wpshopee Awesome Logos allows SQL Injection....
Critical
Unreviewed
CVE-2025-30528
was published
Mar 24, 2025
Rhymix 2.1.19 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data...
Critical
Unreviewed
CVE-2024-55089
was published
Dec 18, 2024
Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker...
Critical
Unreviewed
CVE-2025-26206
was published
Mar 3, 2025
Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute...
Critical
Unreviewed
CVE-2025-25379
was published
Mar 1, 2025
Cross-Site Request Forgery (CSRF) vulnerability in FancyWP Starter Templates by FancyWP allows...
Critical
Unreviewed
CVE-2025-25106
was published
Feb 7, 2025
Cross-Site Request Forgery (CSRF) vulnerability in MetricThemes Munk Sites allows Cross Site...
Critical
Unreviewed
CVE-2025-25101
was published
Feb 7, 2025
Cross-Site Request Forgery (CSRF) vulnerability in sainwp OneStore Sites allows Cross Site...
Critical
Unreviewed
CVE-2025-25107
was published
Feb 7, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Pearlbells Flash News / Post (Responsive)...
Critical
Unreviewed
CVE-2024-56012
was published
Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Harsh iSpring Embedder allows Upload a Web...
Critical
Unreviewed
CVE-2025-23922
was published
Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Mike Selander WP Options Editor allows...
Critical
Unreviewed
CVE-2025-23797
was published
Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Ruben Garza, Jr. GitSync allows Code Injection...
Critical
Unreviewed
CVE-2024-54368
was published
Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Sourov Amin Insertify allows Code Injection...
Critical
Unreviewed
CVE-2024-54372
was published
Dec 16, 2024
ProTip!
Advisories are also available from the
GraphQL API