Vulnerabilities in Drupal
576 resultsCVE-2026-96377MEDIUMCombined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188EPSS 0.3%CVE-2026-73474MEDIUMEntity Share Websub - Moderately critical - Server-side request forgery (SSRF) - SA-CONTRIB-2026-097EPSS 0.3%CVE-2026-55806MEDIUMDrupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007EPSS 0.3%CVE-2026-15081HIGHLocation Selector - Critical - SQL Injection - SA-CONTRIB-2026-072EPSS 0.3%CVE-2024-12393MEDIUMDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003EPSS 0.3%CVE-2024-13291HIGHBasic HTTP Authentication - Critical - Access bypass - SA-CONTRIB-2024-057EPSS 0.3%CVE-2026-81205MEDIUMLDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115EPSS 0.3%CVE-2026-118550MEDIUMAI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270EPSS 0.3%CVE-2025-48445HIGHCommerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066EPSS 0.3%CVE-2026-81162MEDIUMDXPR Builder: The AI Visual Page Builder for Drupal - Moderately critical - Information Disclosure - SA-CONTRIB-2026-112EPSS 0.3%CVE-2025-48448MEDIUMAdmin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-068EPSS 0.3%CVE-2025-48915HIGHCOOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-076EPSS 0.3%CVE-2026-15086MEDIUMRaw Formatter [Meta Tag Formatter] - Critical - Unsupported - SA-CONTRIB-2026-077EPSS 0.3%CVE-2025-48914HIGHCOOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-075EPSS 0.3%CVE-2026-81269MEDIUMData field - Moderately critical - Information disclosure - SA-CONTRIB-2026-108EPSS 0.3%CVE-2024-55635MEDIUMDrupal core - Critical - Cross Site Scripting - SA-CORE-2024-005EPSS 0.3%CVE-2026-118562HIGHSingle Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275EPSS 0.3%CVE-2025-3739MEDIUMDrupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040EPSS 0.3%CVE-2025-3736MEDIUMSimple GTM - Critical - Unsupported - SA-CONTRIB-2025-037EPSS 0.3%CVE-2026-6816MEDIUMTFA Basic Plugins - Access BypassEPSS 0.3%