GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
108,944 advisories
Filter by severity
The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's...
Moderate
Unreviewed
CVE-2024-11229
was published
Nov 23, 2024
The Rescue Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
Moderate
Unreviewed
CVE-2024-11199
was published
Nov 23, 2024
The 우커머스 네이버페이 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's...
Moderate
Unreviewed
CVE-2024-11231
was published
Nov 23, 2024
The 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin for WordPress is vulnerable to Stored Cross-Site...
Moderate
Unreviewed
CVE-2024-11228
was published
Nov 23, 2024
A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as...
Moderate
Unreviewed
CVE-2024-11631
was published
Nov 23, 2024
The Memberlite Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
Moderate
Unreviewed
CVE-2024-11227
was published
Nov 23, 2024
The Wishlist for WooCommerce: Multi Wishlists Per Customer PRO plugin for WordPress is vulnerable...
Moderate
Unreviewed
CVE-2024-10519
was published
Nov 23, 2024
The Checkout with Cash App on WooCommerce plugin for WordPress is vulnerable to Reflected Cross...
Moderate
Unreviewed
CVE-2024-9635
was published
Nov 23, 2024
The Custom CSS, JS & PHP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due...
Moderate
Unreviewed
CVE-2024-11330
was published
Nov 23, 2024
The Chessgame Shizzle plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via...
Moderate
Unreviewed
CVE-2024-11446
was published
Nov 23, 2024
The Quotes llama plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin...
Moderate
Unreviewed
CVE-2024-10874
was published
Nov 23, 2024
The HIPAA Compliant Forms with Drag’n’Drop HIPAA Form Builder. Sign HIPAA documents plugin for...
Moderate
Unreviewed
CVE-2024-11332
was published
Nov 23, 2024
The AutoListicle: Automatically Update Numbered List Articles plugin for WordPress is vulnerable...
Moderate
Unreviewed
CVE-2024-11426
was published
Nov 23, 2024
The WPDash Notes plugin for WordPress is vulnerable to unauthorized access of data due to a...
Moderate
Unreviewed
CVE-2024-9223
was published
Nov 23, 2024
The Tribute Testimonials – WordPress Testimonial Grid/Slider plugin for WordPress is vulnerable...
Moderate
Unreviewed
CVE-2024-10886
was published
Nov 23, 2024
The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting...
Moderate
Unreviewed
CVE-2024-11463
was published
Nov 23, 2024
The Increase Maximum Upload File Size | Increase Execution Time plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-11265
was published
Nov 23, 2024
The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form...
Moderate
Unreviewed
CVE-2024-11188
was published
Nov 23, 2024
The PDF Invoices & Packing Slips Generator for WooCommerce plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-11361
was published
Nov 23, 2024
The Slotti Ajanvaraus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
Moderate
Unreviewed
CVE-2024-11408
was published
Nov 23, 2024
The JobBoardWP – Job Board Listings and Submissions plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-10880
was published
Nov 23, 2024
The Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net...
Moderate
Unreviewed
CVE-2024-11362
was published
Nov 23, 2024
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-10606
was published
Nov 23, 2024
The Easy Liveblogs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
Moderate
Unreviewed
CVE-2024-11387
was published
Nov 23, 2024
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-10216
was published
Nov 23, 2024
ProTip!
Advisories are also available from the
GraphQL API