Drew Webber (mcdruid)

Plotly.js Graphing - Critical - PHP object injection - SA-CONTRIB-2026-050

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055

Advanced Content Feedback (aka admin_feedback) - Moderately critical - Access bypass / Insecure Direct Object Reference (IDOR) - SA-CONTRIB-2026-052

WissKI - Critical - Access bypass - SA-CONTRIB-2026-059

Commerce Realex / Global Payments - Moderately critical - Access Bypass - SA-CONTRIB-2026-058

AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057

Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064

AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054

Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062

Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003