Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2024-5431 | wp-cafe (WordPress plugin) | The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local F | high | 8.8 | 1% |
| CVE-2024-13408 | post-grid-carousel-ultimate (WordPress plugin) | The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local F | high | 7.5 | 1% |
| CVE-2026-9559 | mautic/core | Mautic vulnerable to Path Traversal via Campaign Import | critical | 9.9 | 1% |
| CVE-2025-6746 | woodmart (WordPress plugin) | The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via the 'layout' attribu | high | 8.8 | 1% |
| CVE-2025-64714 | privatebin/privatebin | PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal | medium | 5.8 | 1% |
| CVE-2026-41228 | froxlor/froxlor | Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote Code Execution | critical | 9.9 | 1% |
| CVE-2023-40033 | flarum/core, flarum/framework | Flarum vulnerable to LFI and Blind SSRF via Avatar upload | high | 7.1 | 1% |
| CVE-2024-4359 | bdthemes-element-pack-lite (WordPress plugin) | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerab | medium | 6.5 | 1% |
| CVE-2026-62858 | yourls/yourls | YOURLS: Unauthenticated File Inclusion | medium | 5.3 | 0% |
| CVE-2026-39850 | yiisoft/yii2 | Yii 2: Local file inclusion via view parameter name collision | high | 7.4 | 0% |
| GHSA-49xw-hw94-fmv2 | dolibarr/dolibarr | Dolibarr has Remote Code Execution Vulnerability (Bypass) | high | 8.8 | – |