Vulnerabilities
Summary — last 7 days
New vulnerabilities4,707▼ 595 vs. last week
Critical / high1,807▼ 1,277 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)826▲ 713 vs. last week
More filters
54 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | Unscored | — | — | WebformAI | 10/22/2026 | 10/22/2026 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal Webform RestAI | 10/22/2026 | 10/22/2026 | Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | WebformAI | 10/22/2026 | 10/22/2026 | Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | WebformAI | 10/22/2026 | 10/22/2026 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | WebformAI | 10/22/2026 | 10/22/2026 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | WebformAI | 10/22/2026 | 10/22/2026 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | WebformAI | 10/22/2026 | 10/22/2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | WebformAI | 10/22/2026 | 10/22/2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal WebformAI | 10/22/2026 | 10/22/2026 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Injection. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| Received | Unscored | — | — | Drupal Webform Submissions DeleteAI | 10/22/2026 | 10/22/2026 | Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0. | |
| Awaiting Analysis | Critical (9.1) | 0.31% | — | Drupal Webform RestAI | 8/25/2026 | 8/28/2026 | Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0. | |
| Deferred | Medium (5.3) | 0.32% | — | Mailercloud-integrate-webforms-synchronize-contactsAI | 4/8/2026 | 7/24/2026 | Missing Authorization vulnerability in mailercloud Mailercloud – Integrate webforms and synchronize website contacts mailercloud-integrate-webforms-synchronize-contacts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mailercloud – Integrate webforms and synchronize website… | |
| Modified | High (7) | 0.33% | — | Webform Multiple File Upload Project Webform Multiple File Upload | 11/26/2025 | 6/17/2026 | Webform Multiple File Upload module for Drupal 7.x contains a cross-site scripting (XSS) vulnerability in the file name renderer. An unauthenticated attacker can exploit this vulnerability by uploading a file with a malicious filename containing JavaScript code (e.g., "<img src=1 onerror=alert(document.domain)>") to a… |