CVE-2025-4416

The Drupal Events Log Track module is vulnerable to an Allocation of Resources Without Limits or Throttling (CWE-770) flaw. This issue arises because the module does not sufficiently mitigate resource consumption for certain requests, which can lead to excessive resource allocation and a potentia...

CVE-2025-4416 Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects Events Log Track: from 0.0.0 before 3.1.11, from 4.0.0 before 4.0.2...

CVE-2025-4415 Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...

CVE-2025-4415 Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...

CVE-2025-4415 Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...

Drupal Commerce Eurobank (Redirect) module < 2.1.1 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Marios Tsalkidis silios in WordPress Module Commerce Eurobank Redirect versions 2.1.1...

Drupal Events Log Track security vulnerability

Drupal Events Log Track is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal Events Log Track versions prior to 3.1.11 and prior to 4.0.2, which stems from an unrestricted resource allocation that could lead to resource...

Drupal One Time Password security vulnerability

Drupal One Time Password is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal One Time Password versions prior to 1.3.0 that stems from a capture replay attack that bypasses authentication and could lead to the theft of...

Drupal One Time Password security vulnerability

Drupal One Time Password is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal One Time Password versions prior to 1.3.0 that stems from bypassing authentication using an alternate path or channel, which could lead to...

Drupal One Time Password security vulnerability

Drupal One Time Password is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal One Time Password versions prior to 1.3.0 that stems from bypassing authentication using an alternate path or channel, which could lead to...

Drupal Single Content Sync security vulnerability

Drupal Single Content Sync is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in the Drupal plugin Single Content Sync prior to version 1.4.12, which stems from a lack of authorization and could lead to feature abuse...

Drupal lightGallery module < 1.6.0 - Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff prudloff in WordPress Module lightGallery versions 1.6.0...

Drupal Commerce Alphabank Redirect module < 1.0.3 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Marios Tsalkidis silios in WordPress Module Commerce Alphabank Redirect versions 1.0.3...

PT-2025-22387 · Drupal · Drupal Single Content Sync

Name of the Vulnerable Software and Affected Versions: Drupal Single Content Sync versions 0.0.0 through 1.4.11 Description: The issue is related to a Missing Authorization vulnerability in Drupal Single Content Sync, which allows functionality misuse. Recommendations: For versions 0.0.0 through...

PT-2025-22389 · Drupal · Drupal One Time Password

Name of the Vulnerable Software and Affected Versions: Drupal One Time Password versions 0.0.0 through 1.3.0 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password, allowing functionality bypass. Recommendations:...

PT-2025-22388 · Drupal · Drupal One Time Password

Name of the Vulnerable Software and Affected Versions: Drupal One Time Password versions 0.0.0 through 1.3.0 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password, allowing functionality bypass. Recommendations:...

PT-2025-22390 · Drupal · One Time Password

Name of the Vulnerable Software and Affected Versions: One Time Password versions 0.0.0 through 1.3.0 Description: The issue is related to an Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password, allowing remote services with stolen credentials. Recommendations: For O...

PT-2025-22386 · Drupal · Events Log Track

Name of the Vulnerable Software and Affected Versions: Events Log Track versions 0.0.0 through 3.1.10 Events Log Track versions 4.0.0 through 4.0.1 Description: The issue is related to the allocation of resources without limits or throttling in Drupal Events Log Track, allowing excessive...

CVE-2025-48009: Missing Authorization

Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12...

CVE-2025-48010: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0...