Security

Security

Security

Huge List of Critical but Unsupported Security Vulnerabilities in Contrib Modules!

Share

× SHARE

On January 25th, a whole list of security advisories for contributed module projects was posted by the Drupal Security team that are classified as Critical but Unsupported vulnerabilities. Read to find which ones! ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability in Navbar in Drupal 7

Share

× SHARE

The Drupal Security Team announced a moderately critical Cross-site Scripting-SA-CONTRIB-2022-011 Vulnerability in Navbar module in Drupal 7on January 25th, 2022. ...more

Read Full Content
Security

Multiple Critical Vulnerabilities in the Private Taxonomy Terms Module!

Share

× SHARE

Critical Access bypass, Information Disclosure, and Multiple Vulnerabilities in the Private Taxonomy Terms module SA-CONTRIB-2022-014 was announced on January 26th, 2022 ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability in jQuery UI Datepicker

Share

× SHARE

A Drupal security advisory was announced against a moderately critical XSS vulnerability (SA-CONTRIB-2022-004) in the vendor library, jQuery UI, on January 19th, 2022 ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability in WYSIWYG Drupal 7

Share

× SHARE

The Drupal security team announced a moderately critical cross site scripting (XSS) vulnerability SA-CONTRIB-2022-003 in WYSIWYG Drupal 7 on 2022, January 5th. ...more

Read Full Content
Security

Moderately Critical Access bypass Vulnerability in Simple OAuth & OpenID Connect

Share

× SHARE

Drupal security team announced a moderately critical access bypass vulnerability SA-CONTRIB-2022-002 in Simple OAuth (OAuth2) & OpenID Connect on 2022, January 5th. ...more

Read Full Content
Security

Critical Access bypass Vulnerability in Super Login Drupal 8

Share

× SHARE

The Drupal security team has announced a critical access bypass vulnerability SA-CONTRIB-2022-001 in the Super Login module in Drupal 8, posted on 2022, January 5th. ...more

Read Full Content
Security

Moderately Critical Access bypass Vulnerability in Mail Login

Share

× SHARE

The Drupal security team has posted a moderately critical access bypass vulnerability in Mail Login (SA-CONTRIB-2021-047), dated December 22nd, 2021 ...more

Read Full Content
Security

Critical XSS & Access Bypass Vulnerability in Webform

Share

× SHARE

The Drupal security team has issued on December 8th, 2021 critical cross-site scripting (XSS) and access bypass vulnerability for webform (SA-CONTRIB-2021-045). ...more

Read Full Content
Security

Critical XSS Vulnerability on Search API Pages in Drupal 7

Share

× SHARE

The Drupal security team has posted a CRITICAL cross-site scripting (XSS) vulnerability on Search API pages, dated December 8th, 2021. ...more

Read Full Content
Security

Moderately Critical XSS Vulnerability Discovered in CKEditor

Share

× SHARE

CKEditor has released a security update SA- Core-2021-011 that impacts Drupal. The issue, dated November 17, 2021, is classified as a moderately critical cross-site scripting (XSS) vulnerability. ...more

Read Full Content
Security

Backport Server Configuration Code to Drupal 7

Share

× SHARE

Backport of the Drupal 8 security fix though not required in Drupal 7 it would mitigate the issue when using vulnerable codes or libraries. ...more

Read Full Content

Latest

Display Builder Beta 2 Released with New Features and Tutorial Video

09 February 2026
The “Lego Set” for the AI Era: Inside Cetacean Labs’ Oceanic Platform

09 February 2026
Dripyard Releases Meridian Theme Built on Single Directory Components

09 February 2026

Follow @thedroptimes