Tag: mlhess@drupal.org

0 Attack Reports | 192 Vulnerabilities

Vulnerabilities

CVE-2024-55636

9.8
    Drupal Core
Published: December 10, 2024

CVE-2024-55637

9.8
    Drupal Core
Published: December 10, 2024

CVE-2024-55638

9.8
    Drupal Core
Published: December 10, 2024

CVE-2024-13239

9.8
    Two-factor Authentication (TFA)
Published: January 9, 2025

CVE-2024-13258

9.8
    Drupal
Published: January 9, 2025

CVE-2024-13264

9.8
    Drupal Opigno module
Published: January 9, 2025

CVE-2024-13279

9.8
    Two-factor Authentication (TFA) on Drupal
Published: January 9, 2025

CVE-2024-13280

9.8
    Drupal Persistent Login
Published: January 9, 2025

CVE-2024-13285

9.8
    wkhtmltopdf
Published: January 9, 2025

CVE-2025-7393

9.8
    Drupal
  • Mail Login
Published: July 21, 2025

CVE-2025-8995

9.8
    Drupal
  • Authenticator Login
Published: August 15, 2025

CVE-2024-13241

9.1
    Drupal Open Social
Published: January 9, 2025

CVE-2024-13242

9.1
    Drupal Swift Mailer
Published: January 9, 2025

CVE-2024-13253

9.1
    Drupal Advanced PWA inc Push Notifications
Published: January 9, 2025

CVE-2024-13277

9.1
    Smart IP Ban
Published: January 9, 2025

CVE-2024-13278

9.1
    Drupal Diff
Published: January 9, 2025

CVE-2024-13281

9.1
    Monster Menus
Published: January 9, 2025

CVE-2024-13244

8.8
    Drupal Migrate Tools
Published: January 9, 2025

CVE-2024-13250

8.8
    Drupal Symfony Mailer Lite
Published: January 9, 2025

CVE-2024-13251

8.8
    Drupal Registration role
Published: January 9, 2025

CVE-2024-13260

8.8
    Drupal Migrate queue importer
Published: January 9, 2025

CVE-2024-13282

8.8
    Drupal
Published: January 9, 2025

CVE-2024-13284

8.8
    Gutenberg
Published: January 9, 2025

CVE-2025-48445

8.8
    Drupal
  • Commerce Eurobank Redirect
Published: June 11, 2025

CVE-2025-48446

8.8
    Drupal
  • Commerce Alphabank Redirect
Published: June 11, 2025

CVE-2025-48918

8.8
    Drupal
  • Simple Klaro
Published: June 13, 2025

CVE-2025-48921

8.8
    Drupal
  • Open Social
Published: June 26, 2025

CVE-2025-48914

8.6
    Drupal
  • Cookies Consent Management
Published: June 13, 2025

CVE-2025-48915

8.6
    Drupal
  • Cookies Consent Management
Published: June 13, 2025

CVE-2024-55634

8.1
    Drupal Core
Published: December 10, 2024

CVE-2025-8092

7.6
    Drupal
  • Cookies Consent Management
Published: August 15, 2025

CVE-2025-8361

7.6
    Drupal
  • Drupal
Published: August 15, 2025

CVE-2024-11941

7.5
    Drupal Core
Published: December 5, 2024

CVE-2024-13240

7.5
    Drupal Open Social
Published: January 9, 2025

CVE-2024-13254

7.5
    Drupal
Published: January 9, 2025

CVE-2024-13255

7.5
    Drupal RESTful Web Services
Published: January 9, 2025

CVE-2024-13256

7.5
    Drupal Email Contact
Published: January 9, 2025

CVE-2024-13259

7.5
    Drupal Image Sizes
Published: January 9, 2025

CVE-2024-13265

7.5
    Opigno Learning path
Published: January 9, 2025

CVE-2024-13267

7.5
    Opigno TinCan Question Type
Published: January 9, 2025

CVE-2024-13276

7.5
    Drupal File Entity
Published: January 9, 2025

CVE-2025-4416

7.5
    Drupal
  • Events Log Track
Published: May 21, 2025

CVE-2025-7717

7.5
    Drupal
  • File Download
Published: July 21, 2025

CVE-2025-12082

7.5
    Drupal
  • Civictheme Design System
Published: October 30, 2025

CVE-2025-12466

7.5
    Drupal
  • Simple Oauth
  • Openid Connect
Published: October 30, 2025

CVE-2025-9954

7.5
    Acquia
  • Dam
Published: October 30, 2025

CVE-2024-13291

7.3
    Drupal
Published: January 9, 2025

CVE-2024-13311

7.3
    Drupal
Published: January 9, 2025

CVE-2025-3903

7.3
    Drupal
  • Ueditor Baidu Editor
Published: April 23, 2025

CVE-2025-3904

7.3
    Drupal
  • Sportsleague
Published: April 23, 2025

CVE-2025-48920

7.3
    Drupal
  • Etracker
Published: June 13, 2025

CVE-2025-48447

7.1
    Drupal
  • Lightgallery
Published: June 11, 2025

CVE-2025-12848

7.0
    Drupal
  • Webform Multiple File Upload
Published: November 26, 2025

CVE-2024-13268

6.8
    Opigno
Published: January 9, 2025

CVE-2024-13295

6.6
    Drupal Node export
Published: January 9, 2025

CVE-2024-13296

6.6
    UNKNOWN
Published: January 9, 2025

CVE-2024-13297

6.6
    Eloqua
Published: January 9, 2025

CVE-2024-13299

6.6
    Drupal Megamenu Framework
Published: January 9, 2025

CVE-2024-13300

6.6
    Drupal Print Anything
Published: January 9, 2025

CVE-2025-3062

6.6
    Drupal
  • Admin Lte
Published: March 31, 2025

CVE-2024-13243

6.5
    Drupal Entity Delete Log
Published: January 9, 2025

CVE-2024-13310

6.5
    Drupal Git Utilities
Published: January 9, 2025

CVE-2025-3474

6.5
    panels
Published: April 9, 2025

CVE-2025-3475

6.5
    web-t
Published: April 9, 2025

CVE-2025-3733

6.5
    Drupal
  • Baguettebox.Js
Published: April 16, 2025

CVE-2025-48448

6.5
    Drupal
  • Admin Audit Trail
Published: June 11, 2025

CVE-2025-48916

6.5
    Drupal
  • Bookable Calendar
Published: June 13, 2025

CVE-2025-10930

6.5
    Drupal
  • Currency
Published: October 30, 2025

CVE-2024-13272

6.3
    Drupal
Published: January 9, 2025

CVE-2025-10928

6.3
    Drupal
  • Access Code
Published: October 30, 2025

CVE-2024-55635

6.1
    Drupal Core
Published: December 10, 2024

CVE-2024-13283

6.1
    Drupal Facets
Published: January 9, 2025

CVE-2024-13301

6.1
    OAuth & OpenID Connect Single Sign On - SSO (OAuth/OIDC Client)
Published: January 9, 2025

CVE-2025-3057

6.1
    Drupal
  • Drupal
Published: March 31, 2025

CVE-2025-3900

6.1
    Drupal
  • Colorbox
Published: April 23, 2025

CVE-2025-3901

6.1
    Drupal
  • Bootstrap Site Alert
Published: April 23, 2025

CVE-2025-3902

6.1
    Drupal
  • Drupal
Published: April 23, 2025

CVE-2025-48922

6.1
    Drupal
  • Glightbox
Published: June 26, 2025

CVE-2025-48923

6.1
    Drupal
  • Toc.Js
Published: June 26, 2025

CVE-2025-6674

6.1
    Drupal
  • Ckeditor5 Youtube
Published: June 26, 2025

CVE-2025-7392

6.1
    Drupal
  • Cookies Addons
Published: July 21, 2025

CVE-2025-7715

6.1
    Drupal
  • Block Attributes
Published: July 21, 2025

CVE-2025-7716

6.1
    Drupal
  • Real-Time Seo
Published: July 21, 2025

CVE-2025-10926

6.1
    Drupal
  • Json Field
Published: October 30, 2025

CVE-2025-10927

6.1
    Drupal
  • Plausible Tracking
Published: October 30, 2025

CVE-2025-12083

6.1
    Drupal
  • Civictheme Design System
Published: October 30, 2025

CVE-2024-11942

5.9
    Drupal Core
Published: December 5, 2024

CVE-2025-3734

5.9
    Drupal
  • Stage File Proxy
Published: April 16, 2025

CVE-2025-3739

5.9
    Drupal
  • Google Optimize Hide Page
Published: April 16, 2025

CVE-2025-13081

5.9
    Drupal
  • Drupal Core
Published: November 18, 2025

CVE-2024-13248

5.5
    Drupal Private content
Published: January 9, 2025

CVE-2024-13263

5.5
    Opigno group manager
Published: January 9, 2025

CVE-2024-12393

5.4
    Drupal Core
Published: December 10, 2024

CVE-2024-13237

5.4
    Drupal File Entity (fieldable files)
Published: January 9, 2025

CVE-2024-13238

5.4
    Drupal Typogrify
Published: January 9, 2025

CVE-2024-13245

5.4
    Drupal CKEditor 4 LTS - WYSIWYG HTML editor
Published: January 9, 2025

CVE-2024-13249

5.4
    Drupal Node Access Rebuild Progressive
Published: January 9, 2025

CVE-2024-13252

5.4
    Drupal TacJS
Published: January 9, 2025

CVE-2024-13273

5.4
    Drupal Open Social
Published: January 9, 2025

CVE-2024-13286

5.4
    Drupal SVG Embed
Published: January 9, 2025

CVE-2024-13287

5.4
    Drupal Views SVG Animation
Published: January 9, 2025

CVE-2024-13289

5.4
    Drupal Cookiebot + GTM
Published: January 9, 2025

CVE-2024-13294

5.4
    Drupal POST File
Published: January 9, 2025

CVE-2024-13309

5.4
    Drupal Login Disable
Published: January 9, 2025

CVE-2025-3131

5.4
    eca_event_condition_action
    eca_event_condition_action
    eca_event_condition_action
    eca_event_condition_action
Published: April 9, 2025

CVE-2025-6676

5.4
    Drupal
  • Simple Xml Sitemap
Published: June 26, 2025

CVE-2025-6677

5.4
    Drupal
  • Paragraphs
Published: June 26, 2025

CVE-2025-12760

5.4
    Drupal
  • Email Tfa
Published: November 18, 2025

CVE-2024-13246

5.3
    Drupal Node Access Rebuild Progressive
Published: January 9, 2025

CVE-2024-13257

5.3
    Drupal Commerce View Receipt
Published: January 9, 2025

CVE-2024-13266

5.3
    Drupal Responsive and off-canvas menu
Published: January 9, 2025

CVE-2024-13269

5.3
    Drupal Advanced Varnish
Published: January 9, 2025

CVE-2024-13274

5.3
    Drupal Open Social
Published: January 9, 2025

CVE-2024-13275

5.3
    Drupal Security Kit
Published: January 9, 2025

CVE-2024-13290

5.3
    OhDear Integration for Drupal
Published: January 9, 2025

CVE-2024-13302

5.3
    Drupal Pages Restriction Access
Published: January 9, 2025

CVE-2024-13303

5.3
    Drupal Download All Files
Published: January 9, 2025

CVE-2024-13312

5.3
    Open Social
Published: January 9, 2025

CVE-2025-48013

5.3
    Drupal
  • Quick Node Block
Published: June 11, 2025

CVE-2025-48444

5.3
    Drupal
  • Quick Node Block
Published: June 11, 2025

CVE-2025-10929

5.3
    Drupal
  • Reverse Proxy Header
Published: October 30, 2025

CVE-2025-13080

5.3
    Drupal
  • Drupal Core
Published: November 18, 2025

CVE-2025-48917

5.0
    Drupal
  • Eu Cookie Compliance
Published: June 13, 2025

CVE-2025-48919

5.0
    Drupal
  • Simple Klaro
Published: June 13, 2025

CVE-2024-13247

4.8
    Drupal Coffee
Published: January 9, 2025

CVE-2024-13262

4.8
    Drupal View Password
Published: January 9, 2025

CVE-2024-13292

4.8
    Tooltip
Published: January 9, 2025

CVE-2024-13298

4.8
    Drupal Tarte au Citron
Published: January 9, 2025

CVE-2024-13305

4.8
    Drupal Entity Form Steps
Published: January 9, 2025

CVE-2025-48010

4.8
    Drupal
  • One Time Password
Published: May 21, 2025

CVE-2025-48011

4.8
    Drupal
  • One Time Password
Published: May 21, 2025

CVE-2025-48012

4.8
    Drupal
  • One Time Password
Published: May 21, 2025

CVE-2025-4415

4.8
    Drupal
  • Piwik Pro
Published: May 21, 2025

CVE-2025-6675

4.8
    Drupal
  • Enterprise Mfa
Published: June 26, 2025

CVE-2025-8675

4.7
    Drupal
  • Ai Seo Link Advisor
Published: August 15, 2025

CVE-2024-13304

4.5
    Drupal Minify JS
Published: January 9, 2025

CVE-2024-13270

4.3
    Drupal Freelinking
Published: January 9, 2025

CVE-2024-13271

4.3
    Drupal Content Entity Clone
Published: January 9, 2025

CVE-2024-13288

4.3
    Monster Menus
Published: January 9, 2025

CVE-2025-3907

4.3
    Drupal
  • Search Api Solr
Published: April 23, 2025

CVE-2025-5682

4.3
    Drupal
  • Klaro Cookie And Consent Management
Published: June 26, 2025

CVE-2025-8362

4.3
    Drupal
  • Google Tag Manager
Published: August 15, 2025

CVE-2025-8996

4.3
    Drupal
  • Layout Builder Advanced Permissions
Published: August 15, 2025

CVE-2025-13082

4.3
    Drupal
  • Drupal
Published: November 18, 2025

CVE-2024-13308

3.8
    Browser Back Button
Published: January 9, 2025

CVE-2025-10931

3.8
    Drupal
  • Umami Analytics
Published: October 30, 2025

CVE-2025-13083

3.7
    Drupal
  • Drupal Core
Published: November 18, 2025

CVE-2024-13261

3.5
    Acquia DAM
Published: January 9, 2025

CVE-2025-12761

3.5
    Drupal
  • Simple Multi Step Form
Published: November 18, 2025

CVE-2024-13293

3.1
    Drupal POST File
Published: January 9, 2025

CVE-2025-48009

3.1
    Drupal
  • Single Content Sync
Published: May 21, 2025

CVE-2025-31673

None
    Drupal
  • Drupal Core
Published: March 31, 2025

CVE-2025-31674

None
    Drupal
  • Drupal
Published: March 31, 2025

CVE-2025-31675

None
    Drupal
  • Drupal Core
Published: March 31, 2025

CVE-2025-31676

None
    Drupal
  • Email Tfa
Published: March 31, 2025

CVE-2025-31677

None
    Drupal
  • Ai
Published: March 31, 2025

CVE-2025-31678

None
    Drupal
  • Ai
Published: March 31, 2025

CVE-2025-31679

None
    Drupal
  • Ignition Error Pages
Published: March 31, 2025

CVE-2025-31680

None
    Matomo
  • Analytics
Published: March 31, 2025

CVE-2025-31681

None
    Drupal
  • Authenticator Login
Published: March 31, 2025

CVE-2025-31682

None
    Drupal
  • Google Tag
Published: March 31, 2025

CVE-2025-31683

None
    Drupal
  • Google Tag
Published: March 31, 2025

CVE-2025-31684

None
    Drupal
  • Oauth2 Client
Published: March 31, 2025

CVE-2025-31685

None
    Drupal
  • Open Social
Published: March 31, 2025

CVE-2025-31686

None
    Drupal
  • Open Social
Published: March 31, 2025

CVE-2025-31687

None
    Drupal
  • Spamspan Filter
Published: March 31, 2025

CVE-2025-31688

None
    Drupal
  • Configuration Split
Published: March 31, 2025

CVE-2025-31689

None
    Drupal
  • General Data Protection Regulation
Published: March 31, 2025

CVE-2025-31690

None
    Drupal
  • Cache Utility
Published: March 31, 2025

CVE-2025-31691

None
    Drupal
  • Oauth2 Server
Published: March 31, 2025

CVE-2025-31692

None
    Drupal
  • Ai
Published: March 31, 2025

CVE-2025-31693

None
    Drupal
  • Ai
Published: March 31, 2025

CVE-2025-31694

None
    Drupal
  • Two Factor Authentication
Published: March 31, 2025

CVE-2025-31695

None
    Drupal
  • Link Field Display Mode Formatter
Published: March 31, 2025

CVE-2025-31696

None
    Drupal
  • Rapi Doc Oas Field Formatter
Published: March 31, 2025

CVE-2025-31697

None
    Drupal
  • Formatter Suite
Published: March 31, 2025

CVE-2025-3059

None
    Drupal
  • Profile Private
Published: March 31, 2025

CVE-2025-3060

None
    Drupal
  • Flattern
Published: March 31, 2025

CVE-2025-3061

None
    Drupal
  • Material Admin
Published: March 31, 2025

CVE-2025-3129

None
    Drupal
  • Access Code
Published: April 2, 2025

CVE-2025-3130

None
    Drupal
  • Obfuscate
Published: April 2, 2025

CVE-2025-3735

None
    Drupal
  • Panelizer
Published: April 16, 2025

CVE-2025-3736

None
    Drupal
  • Simple Gtm
Published: April 16, 2025

CVE-2025-3737

None
    Drupal
  • Google Maps Store Locator
Published: April 16, 2025

CVE-2025-3738

None
    Drupal
  • Google Optimize
Published: April 16, 2025

CVE-2025-8093

None
    Drupal
  • Authenticator Login
Published: October 10, 2025

CVE-2025-9549

None
    Drupal
  • Facets
Published: October 10, 2025

CVE-2025-9550

None
    Drupal
  • Facets
Published: October 10, 2025

CVE-2025-9551

None
    Drupal
  • Protected Pages
Published: October 10, 2025

CVE-2025-9552

None
    Drupal
  • Synchronize Composer.Json
Published: October 10, 2025

CVE-2025-9553

None
    Drupal
  • Api Key Manager
Published: October 10, 2025

CVE-2025-9554

None
    Drupal
  • Owl Carousel
Published: October 10, 2025
Click here to see more Vulnerabilities