Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,669
Erlang
34
GitHub Actions
26
Go
2,262
Maven
5,000+
npm
3,912
NuGet
705
pip
3,681
Pub
12
RubyGems
916
Rust
943
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,948 advisories

Loading
Cross-Site Request Forgery (CSRF) vulnerability in Shamim Hasan Custom Functions Plugin allows... High Unreviewed
CVE-2025-46512 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in milat Milat jQuery Automatic Popup allows... High Unreviewed
CVE-2025-46514 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in silencecm Twitter Card Generator allows Stored... High Unreviewed
CVE-2025-46516 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Billy Bryant Tabs allows Stored XSS. This... High Unreviewed
CVE-2025-46522 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in alphasis Related Posts via Taxonomies allows... High Unreviewed
CVE-2025-46520 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in HuangYe WuDeng Hacklog Remote Attachment... High Unreviewed
CVE-2025-46530 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in ldrumm Unsafe Mimetypes allows Stored XSS.... High Unreviewed
CVE-2025-46507 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Steve Availability Calendar allows Stored XSS.... High Unreviewed
CVE-2025-46528 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in stesvis WP Filter Post Category allows Stored... High Unreviewed
CVE-2025-46524 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Navegg Navegg Analytics allows Stored XSS.... High Unreviewed
CVE-2025-46497 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Pham Thanh Call Now PHT Blog allows Stored XSS... High Unreviewed
CVE-2025-46492 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Olar Marius Vasaio QR Code allows Stored XSS.... High Unreviewed
CVE-2025-46504 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in harrysudana Contact Form 7 Calendar allows... High Unreviewed
CVE-2025-46510 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in kasonzhao Advanced lazy load allows Stored XSS... High Unreviewed
CVE-2025-46508 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Lora77 WpZon – Amazon Affiliate Plugin allows... High Unreviewed
CVE-2025-46506 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Casey Johnson Loan Calculator allows Stored... High Unreviewed
CVE-2025-46442 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in digontoahsan Wp Custom CMS Block allows Stored... High Unreviewed
CVE-2025-46457 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in x000x occupancyplan allows Stored XSS. This... High Unreviewed
CVE-2025-46450 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Olav Kolbu Google News allows Stored XSS. This... High Unreviewed
CVE-2025-46452 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in John Weissberg Print Science Designer allows... High Unreviewed
CVE-2025-46465 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in felixtz Modern Polls allows Stored XSS. This... High Unreviewed
CVE-2025-46466 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Vladimir Prelovac Plugin Central allows Path... High Unreviewed
CVE-2025-46439 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Yash Binani Time Based Greeting allows Stored... High Unreviewed
CVE-2025-46435 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Kiotviet KiotViet Sync allows Stored XSS. This... High Unreviewed
CVE-2025-39381 was published Apr 24, 2025
Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar allows... High Unreviewed
CVE-2025-46241 was published Apr 22, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database