https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-5490.htmlhttps://patchthecve.com/cve/CVE-2015-5490.htmlWed, 17 Jun 2026 00:29:12 +0000MEDIUM 5.0: The _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10 for Drupal does not rebuild the full cache if the static cache is not empty, which allows remote attackers to bypass intended filters and obtain access to hidden content via unspecified vectors.https://patchthecve.com/cve/CVE-2015-3379.htmlhttps://patchthecve.com/cve/CVE-2015-3379.htmlWed, 17 Jun 2026 00:25:50 +0000MEDIUM 4.0: The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to the default views configurations, which allows remote authenticated users to obtain sensitive information via unspecified vectors.https://patchthecve.com/cve/CVE-2015-3378.htmlhttps://patchthecve.com/cve/CVE-2015-3378.htmlWed, 17 Jun 2026 00:25:50 +0000MEDIUM 4.9: Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal, when the Views UI submodule is enabled, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to the https://patchthecve.com/cve/CVE-2013-1887.htmlhttps://patchthecve.com/cve/CVE-2013-1887.htmlTue, 16 Jun 2026 23:52:18 +0000LOW 2.1: Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields.