Product by Open Source
Drupal Easy Breadcrumb
23 known vulnerabilities in Drupal Easy Breadcrumb (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-107249 | Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192 | 9.8 | |
| Medium | CVE-2026-107257 | Actstream - Critical - Access bypass - SA-CONTRIB-2026-198 | 6.5 | |
| Medium | CVE-2026-96389 | Xray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206 | 6.5 | |
| Medium | CVE-2026-107251 | Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194 | 6.5 | |
| Medium | CVE-2026-107259 | Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200 | 5.4 | |
| Medium | CVE-2026-107264 | Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203 | 5.4 | |
| Medium | CVE-2026-107265 | Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204 | 5.4 | |
| Medium | CVE-2026-107252 | MathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195 | 5.4 | |
| Medium | CVE-2026-107258 | Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199 | 5.4 | |
| Medium | CVE-2026-107263 | Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202 | 5.4 | |
| Medium | CVE-2026-107267 | DKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208 | 5.3 | |
| Medium | CVE-2026-107262 | Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217 | 5.3 | |
| Medium | CVE-2026-107254 | Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197 | 4.8 | |
| Medium | CVE-2026-107261 | Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201 | 4.2 | |
| Medium | CVE-2026-107312 | Drupal Examples for Developers: Allocation of Resources Without Limits or Throttling | 4.3 | |
| Medium | CVE-2026-107307 | SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210 | 4.3 | |
| Medium | CVE-2026-107310 | Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213 | 4.3 | |
| Low | CVE-2026-107306 | Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209 | 3.8 | |
| Low | CVE-2026-107311 | Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214 | 3.7 | |
| Low | CVE-2026-107309 | Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212 | 3.7 | |
| Low | CVE-2026-107308 | Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211 | 3.1 | |
| Not rated | CVE-2026-107266 | Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205 | — | |
| Not rated | CVE-2026-107255 | Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216 | — |