Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2023-6786 | payment-gateway-for-telcell (WordPress plugin) | The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the api_url parameter before redirecting the user to its va | medium | 6.1 | 1% |
| CVE-2025-55166 | enshrined/svg-sanitize | svg-sanitizer Bypasses Attribute Sanitization | medium | 0.0 | 1% |
| CVE-2026-55590 | cakephp/authentication | CakePHP Authentication: Open redirect weakness via backslash bypass | medium | 0.0 | 0% |
| CVE-2023-45105 | affiliate-toolkit (WordPress plugin) | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugi | medium | 4.7 | 0% |
| CVE-2024-8761 | share-this-image (WordPress plugin) | The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insuffic | high | 7.2 | 0% |
| CVE-2015-10113 | wooframework-tweaks (WordPress plugin) | A vulnerability classified as problematic was found in WooFramework Tweaks Plugin up to 1.0.1 on WordPress. Affected by this vulnerability i | low | 3.5 | 0% |
| CVE-2015-10102 | freshdesk (WordPress plugin) | A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress. Affected by this issue is some unkno | medium | 6.3 | 0% |
| CVE-2024-4704 | contact-form-7 (WordPress plugin) | The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and redirect to the URL | medium | 6.1 | 0% |
| CVE-2023-6812 | wp-compress-image-optimizer (WordPress plugin) | The WP Compress – Image Optimizer [All-In-One plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 6.20 | medium | 4.3 | 0% |
| CVE-2022-4946 | frontend-post-wordpress-plugin (WordPress plugin) | The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow | medium | 5.4 | 0% |
| CVE-2023-22729 | silverstripe/framework | Open redirect vulnerability on CMSSecurity relogin screen | medium | 6.1 | 0% |
| CVE-2023-47548 | integrate-google-drive (WordPress plugin) | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, | medium | 4.7 | 0% |
| CVE-2023-48325 | landing-page-builder (WordPress plugin) | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps Landing Page Builder – Lead Page – Optin Page – Squeeze Page | medium | 4.7 | 0% |
| CVE-2023-5610 | seraphinite-accelerator (WordPress plugin) | The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an ar | medium | 5.4 | 0% |
| CVE-2025-6238 | ai-engine (WordPress plugin) | The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth implementation, as the | high | 8.0 | 0% |
| CVE-2026-80200 | kimai/kimai | Kimai has an Open Redirect via Unvalidated RelayState in SAML ACS Handler | low | 0.0 | 0% |
| CVE-2026-45065 | symfony/routing, symfony/symfony | Symfony has a UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection | medium | 0.0 | 0% |
| CVE-2026-48784 | symfony/routing, symfony/symfony | Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normal | medium | 0.0 | 0% |
| CVE-2024-4445 | wp-compress-image-optimizer (WordPress plugin) | The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa | medium | 6.5 | 0% |
| CVE-2024-3597 | export-wp-page-to-static-html (WordPress plugin) | The Export WP Page to Static HTML/CSS plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.2.2. This | high | 7.1 | 0% |
| CVE-2024-4900 | seopress (WordPress plugin) | The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above rol | medium | 6.1 | 0% |
| CVE-2026-55461 | snipe/snipe-it | Snipe-IT has an Open Redirect After User Edit | medium | 6.1 | 0% |
| CVE-2025-62796 | privatebin/privatebin | PrivateBin is missing HTML sanitization of attached filename in file size hint | medium | 5.8 | 0% |
| CVE-2026-47347 | typo3/cms-core | TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities | medium | 0.0 | 0% |
| CVE-2026-41670 | admidio/admidio | Admidio Sends SAML Response to Unvalidated Assertion Consumer Service URL from AuthnRequest | high | 8.2 | 0% |
| CVE-2026-48012 | shopware/core, shopware/platform | Shopware SSO referer trust leading to an arbitrary redirect target | medium | 4.3 | 0% |
| CVE-2025-65954 | simplesamlphp/simplesamlphp-module-casserver | SimpleSAMLphp casserver: Open Redirect in logout | medium | 4.7 | 0% |
| CVE-2026-77609 | mediawiki/semantic-media-wiki | Semantic MediaWiki has an open redirect in Special:URIResolver | medium | 6.1 | 0% |
| CVE-2024-24764 | october/system | October System module has an Open Redirect for Administrator Accounts | low | 3.5 | 0% |
| CVE-2025-67852 | moodle/moodle | Moodle Open Redirect vulnerability | low | 3.5 | 0% |
| CVE-2025-5256 | mautic/core | Mautic has an Open Redirect vulnerability on user unlock path. | medium | 5.4 | 0% |
| CVE-2024-55892 | typo3/cms-core | TYPO3 Potential Open Redirect via Parsing Differences | medium | 4.8 | 0% |
| CVE-2025-63828 | backdrop/backdrop | Backdrop CMS Host Header Injection vulnerability | medium | 0.0 | 0% |
| CVE-2026-33296 | wwbn/avideo | AVideo has an Open Redirect via Unvalidated redirectUri in userLogin.php | low | 0.0 | 0% |
| CVE-2025-59013 | typo3/cms-core | TYPO3 CMS has an open‑redirect vulnerability | medium | 0.0 | 0% |
| CVE-2026-33885 | statamic/cms | Statamic has an Open Redirect on unauthenticated endpoints via URL parsing differential | medium | 6.1 | 0% |
| CVE-2026-31819 | sylius/sylius | Sylius has an Open Redirect via Referer Header | medium | 0.0 | 0% |
| CVE-2026-42207 | openmage/magento-lts | Magento LTS Vulnerable to Open Redirect via Unvalidated `uenc` Parameter in `stockAction()` | medium | 6.1 | 0% |
| CVE-2026-44833 | snipe/snipe-it | Snipe-IT has an open redirect vulnerability | medium | 5.9 | 0% |
| GHSA-m5q3-mvcr-gc5m | silverstripe/framework | silverstripe/framework BackURL validation bypass with malformed URLs | high | 7.5 | – |
| GHSA-xffp-6w68-4775 | zendframework/zendframework | Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress` | high | 7.5 | – |
| GHSA-25gq-jvx2-vg9x | silverstripe/framework | Silverstripe X-Forwarded-Host request hostname injection | high | 7.2 | – |
| GHSA-3vhm-q4w3-rw8q | oro/platform | OroPlatform Forced Redirect to External Website | medium | 6.1 | – |
| GHSA-v8hp-239v-9367 | oro/crm | OroCRM Forced Redirect to External Website | medium | 6.1 | – |
| GHSA-gfvf-2f25-f34r | drupal/core | Drupal Anonymous Open Redirect | medium | 5.8 | – |
| GHSA-vp8p-c6xj-xpj7 | silverstripe/framework | Silverstripe External redirection risk in Security?ReturnURL | medium | 5.8 | – |
| GHSA-x6v2-xmrq-574j | drupal/drupal | Drupal Anonymous Open Redirect | medium | 5.8 | – |
| GHSA-6gf6-24h2-66j4 | drupal/core | Drupal core Open Redirect vulnerability | medium | 4.3 | – |
| GHSA-wxfg-253g-m7r4 | drupal/drupal | Drupal core Open Redirect vulnerability | medium | 4.3 | – |
| GHSA-7f4f-p7mq-p4fv | drupal/core | Drupal External URL injection through URL aliases leading to Open Redirect | medium | 0.0 | – |