Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,343
Erlang
31
GitHub Actions
22
Go
2,107
Maven
5,000+
npm
3,764
NuGet
679
pip
3,452
Pub
12
RubyGems
892
Rust
886
Swift
37
Unreviewed advisories
All unreviewed
5,000+

13,163 advisories

Loading
The Tutor LMS plugin for WordPress is vulnerable to SQL Injection via the ‘rating_filter’... High Unreviewed
CVE-2024-10400 was published Jan 23, 2025
The Tainacan plugin for WordPress is vulnerable to SQL Injection via the 'collection_id'... Moderate Unreviewed
CVE-2024-13236 was published Jan 23, 2025
The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the ... High Unreviewed
CVE-2024-13234 was published Jan 23, 2025
Synnefo Internet Management Software 2023 was discovered to contain a SQL injection vulnerability. Critical Unreviewed
CVE-2023-37777 was published Jan 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-23931 was published Jan 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-23910 was published Jan 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2025-23686 was published Jan 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-23784 was published Jan 22, 2025
A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1... Moderate Unreviewed
CVE-2025-22980 was published Jan 22, 2025
The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress... High Unreviewed
CVE-2024-13496 was published Jan 22, 2025
The WP-Polls plugin for WordPress is vulnerable to SQL Injection via COOKIE in all versions up to... Moderate Unreviewed
CVE-2024-13426 was published Jan 22, 2025
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the... Critical Unreviewed
CVE-2023-27112 was published Jan 22, 2025
pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the... Critical Unreviewed
CVE-2023-27113 was published Jan 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-22716 was published Jan 21, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-22710 was published Jan 21, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-22553 was published Jan 21, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2024-51818 was published Jan 21, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2024-49333 was published Jan 21, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2024-49303 was published Jan 21, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2024-49655 was published Jan 21, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2024-49666 was published Jan 21, 2025
The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress... Moderate Unreviewed
CVE-2024-13230 was published Jan 21, 2025
The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated... Critical Unreviewed
CVE-2025-0585 was published Jan 20, 2025
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based... High Unreviewed
CVE-2024-13184 was published Jan 18, 2025
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &... High Unreviewed
CVE-2025-0308 was published Jan 18, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database