Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,624
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

59 advisories

Loading
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2026-14280 was published Aug 25, 2026
Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions. Moderate Unreviewed
CVE-2026-66586 was published Aug 20, 2026
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is... Moderate Unreviewed
CVE-2026-17605 was published Aug 1, 2026
Quick.CMS is vulnerable to Local File Inclusion (LFI) in the admin.php endpoint via the p... Moderate Unreviewed
CVE-2026-63302 was published Jul 28, 2026
The Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments &... Moderate Unreviewed
CVE-2025-11977 was published Jul 10, 2026
The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for... Moderate Unreviewed
CVE-2026-13080 was published Jul 9, 2026
The RTMKit (rometheme-for-elementor) plugin for WordPress is vulnerable to Local File Inclusion... Moderate Unreviewed
CVE-2026-5137 was published Jul 3, 2026
Joomla! Component Easy Shop 1.2.3 contains a local file inclusion vulnerability that allows... Moderate Unreviewed
CVE-2019-25760 was published Jun 19, 2026
WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows... Moderate Unreviewed
CVE-2016-20077 was published Jun 15, 2026
WordPress Plugin Abtest contains a local file inclusion vulnerability that allows unauthenticated... Moderate Unreviewed
CVE-2016-20082 was published Jun 15, 2026
WordPress Dharma Booking 2.28.3 and earlier contains a local file inclusion vulnerability that... Moderate Unreviewed
CVE-2016-20079 was published Jun 15, 2026
WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows... Moderate Unreviewed
CVE-2016-20078 was published Jun 15, 2026
WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion... Moderate Unreviewed
CVE-2016-20080 was published Jun 15, 2026
WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated... Moderate Unreviewed
CVE-2016-20064 was published Jun 9, 2026
Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability... Moderate Unreviewed
CVE-2018-25324 was published May 17, 2026
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated... Moderate Unreviewed
CVE-2020-37246 was published May 16, 2026
ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated... Moderate Unreviewed
CVE-2021-47978 was published May 16, 2026
WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows... Moderate Unreviewed
CVE-2020-37169 was published May 13, 2026
WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that... Moderate Unreviewed
CVE-2022-50954 was published May 10, 2026
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-49428 was published Aug 20, 2025
A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11... Moderate Unreviewed
CVE-2026-30480 was published Apr 14, 2026
The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel,... Moderate Unreviewed
CVE-2024-4359 was published Aug 12, 2024
The Import and export users and customers plugin for WordPress is vulnerable to Directory... Moderate Unreviewed
CVE-2023-6583 was published Jan 11, 2024
The Video Gallery – YouTube Playlist, Channel Gallery by YotuWP plugin for WordPress is... Moderate Unreviewed
CVE-2024-4551 was published Jun 15, 2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-49436 was published Aug 20, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database