Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

353,038 advisories

Loading
The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its... Unknown Unreviewed
CVE-2026-110012 was published Oct 16, 2026
The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is... Moderate Unreviewed
CVE-2026-109388 was published Oct 16, 2026
The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a... Unknown Unreviewed
CVE-2026-109982 was published Oct 16, 2026
The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all... Low Unreviewed
CVE-2026-109401 was published Oct 16, 2026
The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information... Moderate Unreviewed
CVE-2026-109382 was published Oct 16, 2026
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is... High Unreviewed
CVE-2026-107768 was published Oct 16, 2026
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-104755 was published Oct 16, 2026
The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check... Unknown Unreviewed
CVE-2026-105974 was published Oct 16, 2026
The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce... Unknown Unreviewed
CVE-2026-105973 was published Oct 16, 2026
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege... High Unreviewed
CVE-2026-104715 was published Oct 16, 2026
The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before... Unknown Unreviewed
CVE-2026-103696 was published Oct 16, 2026
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to... High Unreviewed
CVE-2026-89051 was published Oct 16, 2026
The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in... High Unreviewed
CVE-2026-85659 was published Oct 16, 2026
The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof,... High Unreviewed
CVE-2026-109513 was published Oct 16, 2026
The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL... Moderate Unreviewed
CVE-2026-109414 was published Oct 16, 2026
The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting... High Unreviewed
CVE-2026-111122 was published Oct 16, 2026
The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for... Moderate Unreviewed
CVE-2026-111458 was published Oct 16, 2026
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor... High Unreviewed
CVE-2026-109447 was published Oct 16, 2026
The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and... Moderate Unreviewed
CVE-2026-93767 was published Oct 16, 2026
The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account... Critical Unreviewed
CVE-2026-89079 was published Oct 16, 2026
The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored... Moderate Unreviewed
CVE-2026-110017 was published Oct 16, 2026
The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is... Moderate Unreviewed
CVE-2026-12272 was published Oct 16, 2026
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM... Moderate Unreviewed
CVE-2026-88963 was published Oct 16, 2026
The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for... High Unreviewed
CVE-2026-109232 was published Oct 16, 2026
The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart... High Unreviewed
CVE-2026-95809 was published Oct 16, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database