Vulnerabilities in Drupal

576 results
CVE-2024-13278CRITICALDiff - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-042EPSS 0.4%CVE-2024-13281CRITICALMonster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045EPSS 0.4%CVE-2025-3734MEDIUMStage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-035EPSS 0.4%CVE-2024-13277CRITICALSmart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-041EPSS 0.4%CVE-2025-12848HIGHXSS vulnerability when rendering filename in Webform MultiformEPSS 0.4%CVE-2026-18260MEDIUMDisable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110EPSS 0.4%CVE-2024-13266MEDIUMResponsive and off-canvas menu - Moderately critical - Access bypass - SA-CONTRIB-2024-030EPSS 0.4%CVE-2026-114573HIGHMonster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253EPSS 0.4%CVE-2024-13288MEDIUMMonster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052EPSS 0.4%CVE-2025-8093HIGHAuthenticator Login - Moderately critical - Access bypass - SA-CONTRIB-2025-098EPSS 0.4%CVE-2026-55803MEDIUMDrupal core - Critical - PHP object injection - SA-CORE-2026-005EPSS 0.4%CVE-2026-55804MEDIUMDrupal core - Moderately critical - Gadget chain - SA-CORE-2026-006EPSS 0.4%CVE-2024-13311HIGHAllow All File Extensions for file fields - Critical - Unsupported - SA-CONTRIB-2024-075EPSS 0.4%CVE-2026-18985HIGHEdit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093EPSS 0.4%CVE-2025-48447HIGHLightgallery - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-069EPSS 0.3%CVE-2026-11914MEDIUMComposer - Critical - Unsupported - SA-CONTRIB-2026-046EPSS 0.3%CVE-2026-76758MEDIUMLink content parser - Critical - Unsupported - SA-CONTRIB-2026-101EPSS 0.3%CVE-2025-13080MEDIUMDrupal core - Moderately critical - Denial of Service - SA-CORE-2025-005EPSS 0.3%CVE-2024-13282HIGHBlock permissions - Moderately critical - Access bypass - SA-CONTRIB-2024-046EPSS 0.3%CVE-2026-96377MEDIUMCombined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188EPSS 0.3%