Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.11.09.1, updated 2026-11-08. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2026-96632 | adminneo-org/adminneo | AdminNeo Vulnerable to XSS via Rogue MySQL Server Version String (CSP Nonce Bypass) | high | 0.0 | – |
| CVE-2026-96634 | adminneo-org/adminneo | AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE | medium | 0.0 | – |
| DRUPAL-CONTRIB-2017-082 | drupal/permissions_by_term | The Permissions by Term module extends Drupal by adding functionality for restricting access to single nodes via taxonom | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2017-083 | drupal/config_perms | Custom Permissions is a lightweight module that allows permissions to be created and managed through an administrative f | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2017-091 | drupal/config_update | The Configuration Update Reports sub-module in the Configuration Update module project enables you to run reports to see | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2017-094 | drupal/link_click_count | The Link Click Count module helps you to monitor the traffic to your website by creating link fields. These link fields | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-001 | drupal/stacks | This module enables content editors to create complex pages and layouts on the fly without the help from a developer, us | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-002 | drupal/node_view_permissions | The Node view permissions module enables the "View own content" and "View any content" permissions for each content type | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-008 | drupal/entity_ref_tab_formatter | This module enables you to show referenced entities in tabs. The module doesn't sufficiently sanitize the body fields o | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-014 | drupal/ckeditor_uploadimage | This module enables you to drag and drop or paste images into CKEditor. The module does not sufficiently verify users | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-015 | drupal/jsonapi | This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-016 | drupal/jsonapi | This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-017 | drupal/exif | This module enables you to retrieve image metadata and use them in fields or title. The module doesn't sufficiently res | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-018 | drupal/menu_export | This module helps in exporting and importing Menu Items via the administrative interface. The module does not properly | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-021 | drupal/jsonapi | This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-022 | drupal/drd_agent | This module enables you to monitor and manage any number of remote Drupal sites and aggregate useful information for adm | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-025 | drupal/simple_revision | Simple Taxonomy Revision module enables revisions for taxonomy terms for Drupal 8. The security team is marking this mo | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-027 | drupal/svg_formatter | This module adds a new formatter for the file fields, which allows any file extension to be uploaded. The module doesn | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-038 | drupal/mollom | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-039 | drupal/adtego_siteintel | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-040 | drupal/entity_delete | This module enables you to delete any types of entities in bulk. The module doesn't sufficiently verify access permissi | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-055 | drupal/phpconfig | This module enables you to add or overwrite PHP configuration on a drupal website. The module doesn't sufficiently allo | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-057 | drupal/commerce | This module enables you to build eCommerce websites and applications with Drupal. The module doesn't sufficiently check | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-059 | drupal/fraction | This module enables you to create fields for storing decimal values as two integers (numerator and denominator) for maxi | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-067 | drupal/workbench_moderation | The Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node sta | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-071 | drupal/decoupled_router | This module enables you to resolve the provided Drupal path in order to find the canonical path and information about th | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-073 | drupal/paragraphs | The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-074 | drupal/bootstrap | This base theme bridges the gap between Drupal and the Bootstrap Framework. The theme doesn't sufficiently filter valid | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-078 | drupal/salesforce | This module enables Drupal to synchronize entities with Salesforce records. The module includes a page that does not suf | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2018-081 | drupal/jsonapi | This module provides a JSON:API specification-compliant HTTP API for accessing and manipulating Drupal content and confi | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-004 | drupal/preview_link | The Preview Link module enables you to generate preview links so anonymous users can access unpublished revisions of con | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-010 | drupal/cleantalk | Anti-spam module by CleanTalk to protect your Drupal sites from spambot registration and spam comments publications thru | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-013 | drupal/login_alert | This module provides a field on user profiles which allows users to get a notification when their account logs in to the | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-014 | drupal/acquia_connector | Acquia Connector facilitates sending certain telemetry data to Acquia for the purposes of analysis. The module automates | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-019 | drupal/jsonapi | This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module. | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-021 | drupal/metatag | This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module. Not all c | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-022 | drupal/video | This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module. Not all c | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-023 | drupal/paragraphs | This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module. Not all c | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-024 | drupal/tmgmt | This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module. Not all c | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-025 | drupal/fontawesome | This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module. Not all c | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-030 | drupal/facets | This module enables you to create facet-filters for results of a search query and exposes them as blocks The module doe | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-033 | drupal/eu_cookie_compliance | This module addresses the General Data Protection Regulation (GDPR) that came into effect 25th May 2018, and the EU Dire | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-039 | drupal/addtoany | This module enables you to add social media share buttons on your website to its content and pages. The module doesn't | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-046 | drupal/opigno_forum | In certain circumstances it is possible that certain forum information is available to unprivileged users because the ac | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-047 | drupal/opigno_learning_path | In certain configuration cases, when a learning path is configured as semi-private, anonymous users are allowed to join | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-048 | drupal/multiple_registration | This module enables you to use special routes for user registration with special roles and custom field sets defined for | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-050 | drupal/menu_item_extras | This module enables you to handle fields for Custom Menu Links. The module doesn't sufficiently check requests to one | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-055 | drupal/config_perms | This module enables you to add and manage additional custom permissions through the administration UI. The module doesn | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-058 | drupal/metatag | This module enables you to customize meta tags to help with a site's search engine ranking and improve the display of pa | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-060 | drupal/existing_values_autocomplete_widget | This module provides an autocomplete widget for text fields that suggests all existing (previously entered) values for t | unknown | 0.0 | – |