Sploitus

108 exploited vulnerabilities in Drupal

Showing 1–50 of 108, highest-scoring first

Vendors
Drupal, Bitnami, Canonical, Postgresql Global Development Group, Unknown, Ampache
With known exploits
108
Affected Drupal versions
< 10.5.9, 10.6.7, 11.2.11, 11.3.7, 7.59, 8.4.8, 8.5.3, 7.57, 8.3.9, 8.4.6, 8.5.1, 10.4.10, 10.5.10, 10.6.9, 11.1.10, 11.2.12, 11.3.10, 8.3.4, 9.3.19, 9.4.3, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 6.10, 6.11, 6.12, 6.13, 6.14, 6.15, 6.16, 6.17, 6.18, 6.19, 6.20, 6.21, 6.22, 6.23, 6.24, 6.25, 6.26, 6.27, 6.28, 6.29, 6.30, 6.31, 6.32, 6.33, 6.34, 6.35, 6.36, 6.37, 7.0, 7.1, 8.5.11, 8.6.10, 8.4.5, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 7.10, 7.11, 7.12, 7.13, 7.14, 7.15, 7.16, 7.17, 7.18, 7.19, 7.20, 7.21, 7.22, 7.23, 7.24, 7.25, 7.26, 7.27, 7.28, 7.29, 7.30, 7.31, 7.32, 7.33, 7.34, 7.35, 7.36, 7.37, 7.38, 7.40, 7.91, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.1.10, 8.2.0, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.3.0, 4.0, 4.0.0, 4.1.0, 4.2.0_rc, 4.4, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.5, 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6, 4.5.7, 4.5.8, 4.6, 4.6.0, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7, 4.6.8, 4.6.9, 4.6.10, 4.6.11, 4.7, 4.7.0, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5, 5.2
Affected Drupal Drupal Docker Images versions
≀ 8.5.10-fpm-alpine, 8.3.0-fpm-alpine
Affected Verifone Commerce Paybox versions
≀ 7.x-1.5
Affected Debian Debian Linux versions
= 7.0, 8.0
Affected Php Xml Rpc versions
≀ 1.3.0
Affected Matthiasmullie Minify Js versions
< 3.0.3
Affected Mclewin Wishlist versions
= 6.x-2.1, 6.x-2.2, 6.x-2.4, 7.x-2.5, 7.x-2.x

Vulnerabilities with exploits

Highest CVSS first β€” 12 of these already have exploit code on Sploitus

CVE-2026-6366
CVSS 10.0 HIGH 2026-04-15FIX AVAILABLE
CVE-2025-41240
CVSS 10.0 CRITICAL 2025-07-23FIX AVAILABLE
CVE-2020-35191
CVSS 10.0 CRITICAL 2020-12-17FIX AVAILABLE
CVE-2019-6339
CVSS 10.0 CRITICAL 2019-01-16FIX AVAILABLE
CVE-2018-7602 14 exploits
CVSS 10.0 CRITICAL 2018-04-25
Exploit for Code Injection in DrupalVulmap - Web Vulnerability Scanning And Verification Tools
CVE-2018-7600 50 exploits
CVSS 10.0 CRITICAL 2018-03-28FIX AVAILABLE
Exploit for Improper Input Validation in DrupalExploit for Improper Input Validation in Drupal
CVE-2026-9082 15 exploits
CVSS 9.8 CRITICAL 2026-05-20FIX AVAILABLE
Exploit for CVE-2026-63030--POC
CVE-2017-6925
CVSS 9.8 CRITICAL 2019-01-15FIX AVAILABLE
CVE-2017-6920 7 exploits
CVSS 9.8 CRITICAL 2018-08-06FIX AVAILABLE
Exploit for Improper Input Validation in Joomla Joomla\!Exploit for Improper Input Validation in Joomla Joomla\!
CVE-2022-25277
CVSS 9.0 HIGH 2022-07-20FIX AVAILABLE
CVE-2016-6211
CVSS 8.8 HIGH 2016-06-16FIX AVAILABLE
CVE-2026-0750
CVSS 8.7 HIGH 2026-01-28FIX AVAILABLE
CVE-2016-3168
CVSS 8.5 HIGH 2016-02-28FIX AVAILABLE
CVE-2019-6340 23 exploits
CVSS 8.1 HIGH 2019-02-20FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in DrupalExploit for Deserialization of Untrusted Data in Drupal
CVE-2017-6930
CVSS 8.1 HIGH 2018-03-01FIX AVAILABLE
CVE-2017-6926 1 exploit
CVSS 8.1 HIGH 2018-03-01FIX AVAILABLE
Drupal 8 – CVE-2017-6926漏洞详解
CVE-2017-6381
CVSS 8.1 HIGH 2017-03-16FIX AVAILABLE
CVE-2016-3171
CVSS 8.1 HIGH 2016-04-12FIX AVAILABLE
CVE-2016-3169
CVSS 8.1 HIGH 2016-02-28FIX AVAILABLE
CVE-2016-3162
CVSS 8.1 HIGH 2016-02-28FIX AVAILABLE
CVE-2025-31674
CVSS 7.5 HIGH 2025-03-31FIX AVAILABLE
CVE-2024-22362
CVSS 7.5 HIGH 2024-01-15
CVE-2022-25273
CVSS 7.5 HIGH 2023-04-26
CVE-2022-25275
CVSS 7.5 HIGH 2022-08-06FIX AVAILABLE
CVE-2017-6919 1 exploit
CVSS 7.5 HIGH 2017-04-20FIX AVAILABLE
Drupal Core - Access Bypass vulnerability (CVE-2017-6919)
CVE-2017-6379
CVSS 7.5 HIGH 2017-03-16FIX AVAILABLE
CVE-2017-6377
CVSS 7.5 HIGH 2017-03-16FIX AVAILABLE
CVE-2016-9450
CVSS 7.5 HIGH 2016-11-25FIX AVAILABLE
CVE-2016-3165
CVSS 7.5 HIGH 2016-04-12FIX AVAILABLE
CVE-2016-3163
CVSS 7.5 HIGH 2016-02-28FIX AVAILABLE
CVE-2014-3704 23 exploits
CVSS 7.5 HIGH 2014-10-16FIX AVAILABLE
CATSploit - An Automated Penetration Testing Tool Using Cyber Attack Techniques ScoringExploit for SQL Injection in Drupal
CVE-2005-1921 8 exploits
CVSS 7.5 HIGH 2005-07-01FIX AVAILABLE
PHPXMLRPC 1.1 - Remote Code ExecutionPHPXMLRPC < 1.1 - Remote Code Execution
CVE-2017-6924
CVSS 7.4 HIGH 2019-01-15FIX AVAILABLE
CVE-2016-3167
CVSS 7.4 HIGH 2016-04-12FIX AVAILABLE
CVE-2016-3164
CVSS 7.4 HIGH 2016-02-28FIX AVAILABLE
CVE-2024-13304
CVSS 6.8 MEDIUM 2024-12-04FIX AVAILABLE
CVE-2012-2069
CVSS 6.8 MEDIUM 2012-09-06FIX AVAILABLE
CVE-2007-6752 2 exploits
CVSS 6.8 MEDIUM 2012-03-28
Drupal CMS 7.12 Cross Site Request ForgeryDrupal 7.12 - Multiple Vulnerabilities
CVE-2007-5416 1 exploit
CVSS 6.8 MEDIUM 2007-10-12FIX AVAILABLE
Drupal 5.2 - PHP Zend Hash ation Vector
CVE-2025-3733
CVSS 6.5 MEDIUM 2025-04-16FIX AVAILABLE
CVE-2023-31250
CVSS 6.5 MEDIUM 2023-04-26
CVE-2022-25278
CVSS 6.5 MEDIUM 2023-04-24
CVE-2022-25270
CVSS 6.5 MEDIUM 2022-02-16
CVE-2017-6923
CVSS 6.5 MEDIUM 2019-01-22FIX AVAILABLE
CVE-2017-6922
CVSS 6.5 MEDIUM 2017-06-24FIX AVAILABLE
CVE-2017-6931
CVSS 6.5 MEDIUM 2018-03-01FIX AVAILABLE
CVE-2016-9452
CVSS 6.5 MEDIUM 2016-11-25FIX AVAILABLE
CVE-2026-6365
CVSS 6.4 MEDIUM 2026-04-15FIX AVAILABLE
CVE-2024-45440 4 exploits
CVSS 6.3 MEDIUM 2024-08-28
Exploit for Generation of Error Message Containing Sensitive Information in DrupalπŸ“„ Drupal 11.x-dev Information Disclosure
CVE-2026-6367
CVSS 6.1 MEDIUM 2026-04-15FIX AVAILABLE