Product by Open Source

Drupal Location Selector

10 known vulnerabilities in Drupal Location Selector (Open Source), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Drupal Location Selector (Open Source)

Critical	CVE-2026-15089	Commerce guest registration - Critical - Unsupported - SA-CONTRIB-2026-079 also in 7 other products	9.1	10.07.2026
High	CVE-2026-15081	Location Selector - Critical - SQL Injection - SA-CONTRIB-2026-072 also in 7 other products	7.4	10.07.2026
Medium	CVE-2026-15086	Raw Formatter [Meta Tag Formatter] - Critical - Unsupported - SA-CONTRIB-2026-077 also in 7 other products	5.9	10.07.2026
Medium	CVE-2026-15087	Clean RESTful - Critical - Unsupported - SA-CONTRIB-2026-078 also in 7 other products	5.9	10.07.2026
Medium	CVE-2026-15079	Login Disable - Moderately critical - Access bypass - SA-CONTRIB-2026-070 also in 7 other products	5.4	10.07.2026
Medium	CVE-2026-15085	AI SEO/GEO Analyzer - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-076 also in 7 other products	5.4	10.07.2026
Medium	CVE-2026-15084	UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075 also in 7 other products	5.4	10.07.2026
Medium	CVE-2026-15082	Siteimprove Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-073 also in 7 other products	5.4	10.07.2026
Medium	CVE-2026-15083	ECA: Event - Condition - Action - Less critical - Information disclosure - SA-CONTRIB-2026-074 also in 7 other products	4.2	10.07.2026
Medium	CVE-2026-15080	Ray Enterprise Translation - Moderately critical - Cross site request forgery - SA-CONTRIB-2026-071 also in 7 other products	4.3	10.07.2026