GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,360
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,793
NuGet
683
pip
3,471
Pub
12
RubyGems
894
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
926 advisories
Filter by severity
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to...
Critical
Unreviewed
CVE-2024-10960
was published
Feb 12, 2025
The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file...
Critical
Unreviewed
CVE-2024-13365
was published
Feb 12, 2025
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to...
Critical
Unreviewed
CVE-2024-13011
was published
Feb 10, 2025
In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload...
Critical
Unreviewed
CVE-2024-57668
was published
Feb 6, 2025
OpenPLC_V3 contains an arbitrary file upload vulnerability, which could be leveraged for...
Critical
Unreviewed
CVE-2025-1066
was published
Feb 6, 2025
Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to...
Critical
Unreviewed
CVE-2024-57968
was published
Feb 3, 2025
ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.
Critical
Unreviewed
CVE-2024-57450
was published
Feb 3, 2025
The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing...
Critical
Unreviewed
CVE-2024-13448
was published
Jan 28, 2025
The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient...
Critical
Unreviewed
CVE-2025-0357
was published
Jan 25, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic allows Upload a...
Critical
Unreviewed
CVE-2025-24650
was published
Jan 24, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows...
Critical
Unreviewed
CVE-2025-23942
was published
Jan 22, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Smallerik File Browser...
Critical
Unreviewed
CVE-2025-23918
was published
Jan 22, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Multi Uploader for...
Critical
Unreviewed
CVE-2025-23921
was published
Jan 22, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in Innovative Solutions user files...
Critical
Unreviewed
CVE-2025-23953
was published
Jan 22, 2025
The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due...
Critical
Unreviewed
CVE-2024-13091
was published
Jan 22, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Fancy Product Designer....
Critical
Unreviewed
CVE-2024-51919
was published
Jan 21, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in UkrSolution Barcode Scanner with...
Critical
Unreviewed
CVE-2025-22723
was published
Jan 21, 2025
Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above....
Critical
Unreviewed
CVE-2025-0471
was published
Jan 16, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in Web Ready Now WR Price List...
Critical
Unreviewed
CVE-2025-22782
was published
Jan 15, 2025
An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file...
Critical
Unreviewed
CVE-2024-48760
was published
Jan 15, 2025
Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload...
Critical
Unreviewed
CVE-2024-46479
was published
Jan 13, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in jumpdemand 4ECPS Web Forms...
Critical
Unreviewed
CVE-2025-22504
was published
Jan 9, 2025
An issue was discovered in Ovidentia 8.3. The file upload feature does not prevent the uploading...
Critical
Unreviewed
CVE-2022-41573
was published
Jan 7, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGlow JobBoard Job listing...
Critical
Unreviewed
CVE-2024-43243
was published
Jan 7, 2025
File Upload vulnerability in ChestnutCMS through 1.5.0. Based on the code analysis, it was...
Critical
Unreviewed
CVE-2024-56828
was published
Jan 6, 2025
ProTip!
Advisories are also available from the
GraphQL API