Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.30.2, updated 2026-10-30. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2015-9511 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1. | medium | 6.1 | 1% |
| CVE-2015-9512 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) CSV Manager extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before | medium | 6.1 | 1% |
| CVE-2015-9513 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Favorites extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2 | medium | 6.1 | 1% |
| CVE-2015-9514 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Free Downloads extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x bef | medium | 6.1 | 1% |
| CVE-2015-9515 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) htaccess Editor extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x be | medium | 6.1 | 1% |
| CVE-2015-9516 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2. | medium | 6.1 | 1% |
| CVE-2015-9517 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Manual Purchases extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x b | medium | 6.1 | 1% |
| CVE-2015-9518 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x befor | medium | 6.1 | 1% |
| CVE-2015-9519 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) PDF Stamper extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before | medium | 6.1 | 1% |
| CVE-2015-9520 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Per Product Emails extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x | medium | 6.1 | 1% |
| CVE-2015-9521 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2 | medium | 6.1 | 1% |
| CVE-2015-9522 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0 | medium | 6.1 | 1% |
| CVE-2015-9523 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0 | medium | 6.1 | 1% |
| CVE-2015-9524 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x b | medium | 6.1 | 1% |
| CVE-2015-9525 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Recurring Payments extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x | medium | 6.1 | 1% |
| CVE-2015-9526 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0 | medium | 6.1 | 1% |
| CVE-2015-9527 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Simple Shipping extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x be | medium | 6.1 | 1% |
| CVE-2015-9528 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Software Licensing extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x | medium | 6.1 | 1% |
| CVE-2015-9529 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0. | medium | 6.1 | 1% |
| CVE-2015-9530 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Upload File extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before | medium | 6.1 | 1% |
| CVE-2015-9531 | easy-digital-downloads (WordPress plugin) | The Easy Digital Downloads (EDD) Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before | medium | 6.1 | 1% |
| CVE-2015-9532 | easy-digital-downloads (WordPress theme) | The Easy Digital Downloads (EDD) Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2 | medium | 6.1 | 1% |
| CVE-2015-9533 | easy-digital-downloads (WordPress theme) | The Easy Digital Downloads (EDD) Lattice theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, | medium | 6.1 | 1% |
| CVE-2015-9534 | easy-digital-downloads (WordPress theme) | The Easy Digital Downloads (EDD) Quota theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2. | medium | 6.1 | 1% |
| CVE-2015-9535 | easy-digital-downloads (WordPress theme) | The Easy Digital Downloads (EDD) Shoppette theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5 | medium | 6.1 | 1% |
| CVE-2015-9536 | easy-digital-downloads (WordPress theme) | The Easy Digital Downloads (EDD) Twenty-Twelve theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2 | medium | 6.1 | 1% |
| CVE-2016-10866 | all-in-one-wp-security-and-firewall (WordPress plugin) | The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues. | medium | 6.1 | 1% |
| CVE-2016-10868 | all-in-one-wp-security-and-firewall (WordPress plugin) | The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection s | medium | 6.1 | 1% |
| CVE-2016-10869 | contact-form-plugin (WordPress plugin) | The contact-form-plugin plugin before 4.0.2 for WordPress has XSS. | medium | 6.1 | 1% |
| CVE-2016-10871 | mailchimp-for-wp (WordPress plugin) | The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page. | medium | 6.1 | 1% |
| CVE-2016-10892 | chained-quiz (WordPress plugin) | The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues. | medium | 6.1 | 1% |
| CVE-2016-10919 | wassup (WordPress plugin) | The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerabilit | medium | 6.1 | 1% |
| CVE-2016-10925 | peters-login-redirect (WordPress plugin) | The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs. | medium | 6.1 | 1% |
| CVE-2017-12200 | ultimate-product-catalog (WordPress plugin) | The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product Manually component. | medium | 6.1 | 1% |
| CVE-2017-18593 | updraftplus (WordPress plugin) | The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file. | medium | 6.1 | 1% |
| CVE-2017-18503 | twitter-cards-meta (WordPress plugin) | The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS. | medium | 6.1 | 1% |
| CVE-2017-18506 | woocommerce-pdf-invoices-packing-slips (WordPress plugin) | The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens. | medium | 6.1 | 1% |
| CVE-2019-15644 | zoho-salesiq (WordPress plugin) | The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS. | medium | 6.1 | 1% |
| CVE-2022-36037 | getkirby/cms | Cross-site scripting from dynamic options in the multiselect field | medium | 5.9 | 1% |
| CVE-2016-4880 | baserproject/basercms | baserCMS Cross-site Scripting vulnerability | medium | 5.4 | 1% |
| CVE-2015-9328 | profile-builder (WordPress plugin) | The profile-builder plugin before 2.2.5 for WordPress has XSS. | medium | 6.1 | 1% |
| CVE-2016-10936 | wp-polls (WordPress plugin) | The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option. | medium | 6.1 | 1% |
| CVE-2021-24976 | smart-seo-tool (WordPress plugin) | The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute | medium | 6.1 | 1% |
| CVE-2017-18499 | simple-membership (WordPress plugin) | The simple-membership plugin before 3.5.7 for WordPress has XSS. | medium | 6.1 | 1% |
| CVE-2017-18538 | weblibrarian (WordPress plugin) | The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes. | medium | 6.1 | 1% |
| CVE-2017-18540 | weblibrarian (WordPress plugin) | The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes. | medium | 6.1 | 1% |
| CVE-2017-18559 | cforms2 (WordPress plugin) | The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues. | medium | 6.1 | 1% |
| CVE-2018-21012 | cf7-invisible-recaptcha (WordPress plugin) | The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS. | medium | 6.1 | 1% |
| CVE-2017-18488 | backup (WordPress plugin) | The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues. | medium | 6.1 | 1% |
| CVE-2017-18489 | contact-form-7-sms-addon (WordPress plugin) | The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS. | medium | 6.1 | 1% |