Exposure of Drupal

CMS
279
exposure score
94,414
sites use
4
exploited
9
critical

CVEs

104 results
CVE-2026-55803MEDIUMDrupal core - Critical - PHP object injection - SA-CORE-2026-005EPSS 0.4%CVE-2026-55804MEDIUMDrupal core - Moderately critical - Gadget chain - SA-CORE-2026-006EPSS 0.4%CVE-2025-13080MEDIUMDrupal core - Moderately critical - Denial of Service - SA-CORE-2025-005EPSS 0.3%CVE-2026-55806MEDIUMDrupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007EPSS 0.3%CVE-2024-12393MEDIUMDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003EPSS 0.3%CVE-2026-81162MEDIUMDXPR Builder: The AI Visual Page Builder for Drupal - Moderately critical - Information Disclosure - SA-CONTRIB-2026-112EPSS 0.3%CVE-2026-108097HIGHDrupal core - Critical - Remote code execution - SA-CORE-2026-014EPSS 0.3%CVE-2024-55635MEDIUMDrupal core - Critical - Cross Site Scripting - SA-CORE-2024-005EPSS 0.3%CVE-2025-3739MEDIUMDrupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040EPSS 0.3%CVE-2025-31673MEDIUMDrupal core - Moderately critical - Access bypass - SA-CORE-2025-002EPSS 0.3%CVE-2026-0750HIGHPayment bypass in Commerce PayboxEPSS 0.3%CVE-2025-3057MEDIUMDrupal core - Critical - Cross site scripting - SA-CORE-2025-001EPSS 0.3%CVE-2026-3216MEDIUMDrupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017EPSS 0.3%CVE-2025-47706MEDIUMEnterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-052EPSS 0.3%CVE-2025-13081MEDIUMDrupal core - Moderately critical - Gadget chain - SA-CORE-2025-006EPSS 0.3%CVE-2026-96385MEDIUMREST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182EPSS 0.3%CVE-2025-13083LOWDrupal core - Moderately critical - Information disclosure - SA-CORE-2025-008EPSS 0.3%CVE-2024-24837MEDIUMCross-Site Request Forgery (CSRF) vulnerability in FG PrestaShop, FG Drupal and FG Joomla WordPress pluginsEPSS 0.3%CVE-2026-55808MEDIUMDrupal core - Moderately critical - Improper validation - SA-CORE-2026-009EPSS 0.3%CVE-2025-7716MEDIUMReal-time SEO for Drupal - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-091EPSS 0.3%