Drupal vulnerabilities
576 CVEs and advisories name Drupal as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-7392Cookies Addons - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-087
- CVE-2025-7393Mail Login - Critical - Access bypass - SA-CONTRIB-2025-088
- CVE-2025-7031Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086
- CVE-2025-7030Two-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085
- CVE-2025-6677Paragraphs table - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-084
- CVE-2025-6676Simple XML sitemap - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-083
- CVE-2025-6675Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-082
- CVE-2025-6674CKEditor5 Youtube - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-081
- CVE-2025-5682Klaro Cookie & Consent Management - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-080
- CVE-2025-48921Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079
- CVE-2025-48922GLightbox - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-078
- CVE-2025-48923Toc.js - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-077
- CVE-2025-48915COOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-076
- CVE-2025-48914COOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-075
- CVE-2025-48920etracker - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-074
- CVE-2025-48919Simple Klaro - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-073
- CVE-2025-48917EU Cookie Compliance (GDPR Compliance) - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-072
- CVE-2025-48918Simple Klaro - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-071
- CVE-2025-48916Bookable Calendar - Less critical - Access bypass - SA-CONTRIB-2025-070
- CVE-2025-48447Lightgallery - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-069
- CVE-2025-48448Admin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-068
- CVE-2025-48446Commerce Alphabank Redirect - Moderately critical - Access bypass - SA-CONTRIB-2025-067
- CVE-2025-48445Commerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066
- CVE-2025-48013Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-065
- CVE-2025-48444Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064
- CVE-2025-48012One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-063
- CVE-2025-48011One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-062
- CVE-2025-48010One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061
- CVE-2025-48009Single Content Sync - Moderately critical - Access bypass - SA-CONTRIB-2025-060
- CVE-2025-4416Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059