GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,096
Erlang
29
GitHub Actions
19
Go
1,925
Maven
5,000+
npm
3,654
NuGet
638
pip
3,263
Pub
10
RubyGems
873
Rust
823
Swift
35
Unreviewed advisories
All unreviewed
5,000+
3,274 advisories
Filter by severity
The Gixaw Chat WordPress plugin through 1.0 does not have CSRF check in some places, and is...
Moderate
Unreviewed
CVE-2024-7816
was published
Sep 12, 2024
The ILC Thickbox WordPress plugin through 1.0 does not have CSRF check in place when updating its...
Moderate
Unreviewed
CVE-2024-7820
was published
Sep 12, 2024
The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF checks in some places,...
Moderate
Unreviewed
CVE-2024-7817
was published
Sep 12, 2024
The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating...
Moderate
Unreviewed
CVE-2024-7859
was published
Sep 12, 2024
The blogintroduction-wordpress-plugin WordPress plugin through 0.3.0 does not have CSRF check in...
Moderate
Unreviewed
CVE-2024-7862
was published
Sep 12, 2024
The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places,...
Moderate
Unreviewed
CVE-2024-6017
was published
Sep 12, 2024
The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting...
Moderate
Unreviewed
CVE-2024-3163
was published
Sep 12, 2024
The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to,...
Moderate
Unreviewed
CVE-2023-2919
was published
Sep 10, 2024
The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could...
Moderate
Unreviewed
CVE-2024-7688
was published
Sep 9, 2024
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when...
Moderate
Unreviewed
CVE-2024-6856
was published
Sep 8, 2024
The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its...
Moderate
Unreviewed
CVE-2024-6925
was published
Sep 8, 2024
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when...
Moderate
Unreviewed
CVE-2024-6852
was published
Sep 8, 2024
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating...
Moderate
Unreviewed
CVE-2024-6853
was published
Sep 8, 2024
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit...
Moderate
Unreviewed
CVE-2024-6855
was published
Sep 8, 2024
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to...
Moderate
Unreviewed
CVE-2024-45172
was published
Sep 4, 2024
A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified...
Moderate
Unreviewed
CVE-2024-8414
was published
Sep 4, 2024
REDCap 14.7.0 allows HTML injection via the project title of a New Project action. This can lead...
Moderate
Unreviewed
CVE-2024-45527
was published
Sep 2, 2024
WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery...
Moderate
Unreviewed
CVE-2024-45270
was published
Sep 2, 2024
WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery...
Moderate
Unreviewed
CVE-2024-45269
was published
Sep 2, 2024
The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up...
Moderate
Unreviewed
CVE-2024-8319
was published
Aug 30, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki WP Armour Extended.This issue...
Moderate
Unreviewed
CVE-2024-43947
was published
Aug 29, 2024
A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Music Management System...
Moderate
Unreviewed
CVE-2024-42793
was published
Aug 28, 2024
The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor,...
Moderate
Unreviewed
CVE-2024-8200
was published
Aug 27, 2024
The Visual Sound plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions...
Moderate
Unreviewed
CVE-2024-8197
was published
Aug 27, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Team SpeedyCache.This issue...
Moderate
Unreviewed
CVE-2024-43299
was published
Aug 26, 2024
ProTip!
Advisories are also available from the
GraphQL API