Vulnerabilities in Drupal
576 resultsCVE-2026-6816MEDIUMTFA Basic Plugins - Access BypassEPSS 0.3%CVE-2025-3739MEDIUMDrupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040EPSS 0.3%CVE-2025-48011MEDIUMOne Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-062EPSS 0.3%CVE-2025-3737MEDIUMGoogle Maps: Store Locator - Critical - Unsupported - SA-CONTRIB-2025-038EPSS 0.3%CVE-2026-81168LOWCAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105EPSS 0.3%CVE-2025-31673MEDIUMDrupal core - Moderately critical - Access bypass - SA-CORE-2025-002EPSS 0.3%CVE-2025-3735MEDIUMPanelizer (obsolete) - Critical - Unsupported - SA-CONTRIB-2025-036EPSS 0.3%CVE-2026-73477MEDIUMQuick Tabs - Moderately critical - Access bypass - SA-CONTRIB-2026-099EPSS 0.3%CVE-2026-114524HIGHCustom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225EPSS 0.3%CVE-2026-96398MEDIUMWebform - Less critical - Access bypass - SA-CONTRIB-2026-173EPSS 0.3%CVE-2024-13271MEDIUMContent Entity Clone - Moderately critical - Information Disclosure - SA-CONTRIB-2024-035EPSS 0.3%CVE-2024-13270MEDIUMFreelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034EPSS 0.3%CVE-2025-7031MEDIUMConfig Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086EPSS 0.3%CVE-2026-15088MEDIUMDevelopment Environment - Critical - Unsupported - SA-CONTRIB-2026-089EPSS 0.3%CVE-2026-18261MEDIUMPowerful Surveys - Critical - Unsupported - SA-CONTRIB-2026-092EPSS 0.3%CVE-2026-16643MEDIUMLunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086EPSS 0.3%CVE-2026-16642MEDIUMEmail Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085EPSS 0.3%CVE-2026-81158MEDIUMEntity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-113EPSS 0.3%CVE-2026-81166MEDIUMDigital Signage Framework - Moderately critical - Access bypass - SA-CONTRIB-2026-109EPSS 0.3%CVE-2026-0750HIGHPayment bypass in Commerce PayboxEPSS 0.3%