Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,676
Maven
5,000+
npm
4,298
NuGet
760
pip
4,077
Pub
12
RubyGems
957
Rust
1,058
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

132,737 advisories

Loading
The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is... Moderate Unreviewed
CVE-2025-13452 was published Nov 25, 2025
The atec Duplicate Page & Post plugin for WordPress is vulnerable to unauthorized post... Moderate Unreviewed
CVE-2025-13404 was published Nov 25, 2025
The Locker Content plugin for WordPress is vulnerable to Sensitive Information Exposure in... Moderate Unreviewed
CVE-2025-12525 was published Nov 25, 2025
A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker... Moderate Unreviewed
CVE-2025-59369 was published Nov 25, 2025
The Peer Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions... Moderate Unreviewed
CVE-2025-12587 was published Nov 25, 2025
Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3... Moderate Unreviewed
CVE-2025-59485 was published Nov 25, 2025
A path traversal vulnerability has been identified in certain router models. A remote,... Moderate Unreviewed
CVE-2025-59372 was published Nov 25, 2025
The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is... Moderate Unreviewed
CVE-2025-13389 was published Nov 25, 2025
The Inline frame – Iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... Moderate Unreviewed
CVE-2025-12645 was published Nov 25, 2025
The Bookme – Free Online Appointment Booking and Scheduling Plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2025-13385 was published Nov 25, 2025
The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... Moderate Unreviewed
CVE-2025-13311 was published Nov 25, 2025
The Frontend File Manager Plugin for WordPress is vulnerable to Insecure Direct Object Reference... Moderate Unreviewed
CVE-2025-13382 was published Nov 25, 2025
The AI Engine for WordPress: ChatGPT, GPT Content Generator plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2025-13380 was published Nov 25, 2025
A stack buffer overflow vulnerability has been identified in certain router models. An... Moderate Unreviewed
CVE-2025-59365 was published Nov 25, 2025
The Social Images Widget plugin for WordPress is vulnerable to unauthorized modification of data... Moderate Unreviewed
CVE-2025-13386 was published Nov 25, 2025
The ProjectList plugin for WordPress is vulnerable to time-based SQL Injection via the 'id'... Moderate Unreviewed
CVE-2025-13370 was published Nov 25, 2025
The Conditional Maintenance Mode for WordPress plugin for WordPress is vulnerable to Cross-Site... Moderate Unreviewed
CVE-2025-12586 was published Nov 25, 2025
The Chamber Dashboard Business Directory plugin for WordPress is vulnerable to unauthorized data... Moderate Unreviewed
CVE-2025-13414 was published Nov 25, 2025
The Job Board by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting in... Moderate Unreviewed
CVE-2025-13383 was published Nov 25, 2025
The Autochat Automatic Conversation plugin for WordPress is vulnerable to unauthorized... Moderate Unreviewed
CVE-2025-12043 was published Nov 25, 2025
An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may... Moderate Unreviewed
CVE-2025-59368 was published Nov 25, 2025
The Ace Post Type Builder plugin for WordPress is vulnerable to unauthorized custom taxonomy... Moderate Unreviewed
CVE-2025-13405 was published Nov 25, 2025
The Zweb Social Mobile – Ứng Dụng Nút Gọi Mobile plugin for WordPress is vulnerable to Stored... Moderate Unreviewed
CVE-2025-12032 was published Nov 25, 2025
The Refund Request for WooCommerce plugin for WordPress is vulnerable to unauthorized... Moderate Unreviewed
CVE-2025-12634 was published Nov 25, 2025
The Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object... Moderate Unreviewed
CVE-2025-12040 was published Nov 25, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database