Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.11.04.1, updated 2026-11-03. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| GHSA-mgr9-6c2j-jxrq | pterodactyl/panel | Pterodactyl has a Reflected XSS vulnerability in “Create New Database Host” | low | 0.0 | – |
| GHSA-mqf3-qpc3-g26q | silverstripe/framework | Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message | low | 0.0 | – |
| GHSA-p5c5-gmj4-g48f | typo3/cms | Cross-Site Scripting (XSS) vulnerability in typolinks | medium | 0.0 | – |
| GHSA-pxqj-xrv5-qvjf | phpxmlrpc/phpxmlrpc | XML-RPC for PHP's debugger vulnerable to possible XSS attack | medium | 0.0 | – |
| GHSA-q73v-79x3-jv2w | ezsystems/ezplatform-admin-ui | eZ Platform Admin UI Cross-site Scripting vulnerability | high | 0.0 | – |
| GHSA-qmwf-j7g7-f5jw | typo3/cms | Cross-Site Scripting in third party library mso/idna-convert | medium | 0.0 | – |
| GHSA-qvhr-55hg-3qwv | shopware/core, shopware/platform | Non-persistent XSS in the Storefront in Shopware | low | 0.0 | – |
| GHSA-r5rx-53g9-25rj | ezsystems/ezplatform-admin-ui-assets | Ibexa eZ Platform Admin UI assets XSS vulnerabilities in back office | medium | 0.0 | – |
| GHSA-r7pm-mw8g-p7px | ezsystems/ezplatform-admin-ui | Ibexa eZ Platform Admin UI XSS vulnerabilities in back office | medium | 0.0 | – |
| GHSA-rrwm-8wqm-gwgv | pimcore/pimcore | Cross-site Scripting (XSS) - stored in Print Documents | medium | 0.0 | – |
| GHSA-v4q9-437p-mhpg | leantime/leantime | Leantime allows Cross Site Scripting (XSS) and SQL Injection (SQLi) | high | 0.0 | – |
| GHSA-vhgq-r8gx-5fpv | ibexa/admin-ui-assets | Ibexa Admin UI assets XSS vulnerabilities in back office | medium | 0.0 | – |
| GHSA-w9p3-26fx-5mp3 | ezsystems/platform-ui-assets-bundle | eZ Platform Admin UI is vulnerable to Cross-site Scripting (XSS) | medium | 0.0 | – |