Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.11.09.1, updated 2026-11-08. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| DRUPAL-CONTRIB-2019-062 | drupal/super_login | This module improves the Drupal login page with the new features and layout. The module doesn't sufficiently filter inp | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-063 | drupal/elf | The External Link Filter module provides an input filter that replaces external links by a local link that redirects to | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-064 | drupal/forms_steps | Forms Steps provides an UI to create form workflows using form modes. It creates quick and configurable multisteps forms | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-065 | drupal/imagecache_external | This module that allows you to store external images on your server and apply your own Image Styles. The module exposes | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-066 | drupal/create_user_permission | This module enables you to have a separate permission only for creating users. The module doesn't respect Drupal's sett | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-067 | drupal/tablefield | This module allows you to attach tabular data to an entity. There is insufficient access checking for users with the ab | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-068 | drupal/permissions_by_term | This module enables you to control access to content based on taxonomy terms. The module doesn't sufficiently check if a | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-069 | drupal/gutenberg | This module provides a new UI experience for node editing - Gutenberg editor. The routes used by the Gutenberg editor l | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-071 | drupal/simple_amp | This module allows display of a site's content in AMP format. The module doesn't sufficiently check access on unpublish | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-074 | drupal/bat | The Bat module provides a foundation through which a wide range of availability management, reservation and booking use | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-078 | drupal/nexus | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-081 | drupal/bugsnag | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-088 | drupal/sendinblue | **Update:** This module had an access bypass vulnerability which has now been addressed by the module’s current maintain | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-089 | drupal/commerce_ingenico | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-092 | drupal/smart_trim | The Smart Trim module allows site builders additional control with text summary fields. The module doesn't sufficiently | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-093 | drupal/taxonomy_access_fix | This module extends access handling of Drupal Core's Taxonomy module. The module doesn't sufficiently check, * if a gi | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-094 | drupal/modal_page | This project enables administrators to create modal dialogs. The routes used by the module lacked proper permissions, a | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2019-095 | drupal/permissions_by_term | The Permissions by Term module extends Drupal by functionality for restricting access to single nodes via taxonomy terms | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-002 | drupal/spamspan | The SpamSpan module obfuscates email addresses to help prevent spambots from collecting them. This module contains a sp | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-003 | drupal/views_bulk_operations | Views Bulk Operations provides enhancements to running bulk actions on views. The module contains an access bypass vuln | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-004 | drupal/profile | The Profile module enables you to allow users to have configurable user profiles. The module doesn't sufficiently check | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-005 | drupal/svg_formatter | SVG Formatter module provides support for using SVG images on your website. This security release fixes third-party dep | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-006 | drupal/saml_sp | This module enables you to authenticate Drupal users using an external SAML Identity Provider. If the site is configure | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-008 | drupal/svg_image | SVG Image module allows to upload SVG files. The module did not sufficiently protect against malicious code inside SVG | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-010 | drupal/jsonapi | This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuratio | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-011 | drupal/webform | This module enables you to build forms and surveys in Drupal. The module doesn't sufficiently filter webform element pr | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-012 | drupal/webform | This module enables you to build forms and surveys in Drupal. The module doesn't sufficiently validate data submitted i | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-013 | drupal/webform | The Webform module allows site builders to create forms. The module doesn't sufficiently prevent malicious code from be | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-014 | drupal/webform | This module enables you to build forms and surveys in Drupal. The module doesn't sufficiently filter user input under i | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-015 | drupal/webform | This module enables you to build forms and surveys in Drupal. The module doesn't sufficiently sanitize Webform labels n | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-016 | drupal/webform | This webform module enables you to build 'Term select' and 'Term checkboxes' elements. The module doesn't sufficiently | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-017 | drupal/webform | This module enables you to build forms and surveys in Drupal. The Webform Node sub-module allows these forms to be asso | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-018 | drupal/webform | This webform module enables you to build a 'Term checkboxes' element. The module doesn't sufficiently check term 'view' | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-019 | drupal/recaptcha_v3 | The reCaptcha v3 module enables you to protect your forms using the Google reCaptcha V3. If the reCaptcha v3 challenge | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-020 | drupal/commerce | Drupal Commerce is used to build eCommerce websites and applications. It's possible to configure commerce to permit orde | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-021 | drupal/prlp | This module enables you to force a password update when using password reset link. The module doesn't sufficiently val | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-024 | drupal/open_readspeaker | This module enables you to add a configured ReadSpeaker button for text-to-speech for your site visitors. The module do | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-027 | drupal/easy_breadcrumb | This module enables you to use the current URL (path alias) and the current page's title to automatically extract the br | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-028 | drupal/apigee_edge | The Apigee Edge module allows connecting a Drupal site to Apigee Edge in order to build a developer portal. It contains | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-029 | drupal/modal_form | The Modal form module is a toolset for quick start of using forms in modal windows. Any form is available for view and | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-030 | drupal/group | This module enables you to hand out permissions on a smaller subset, section or community of your website. The module u | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-032 | drupal/group | The Group module enables you to hand out permissions on a smaller subset, section or community of your website. With th | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-033 | drupal/group | The Group module enables you to hand out permissions on a smaller subset, section or community of your website. Under v | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-034 | drupal/oauth_server_sso | This module enables you login into any OAuth 2.0 compliant application using Drupal credentials. The 8.x branch of the | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-035 | drupal/examples | The File Example submodule within the Examples project does not properly sanitize certain filenames as described in [SA- | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2020-038 | drupal/miniorange_saml | This module enables your users residing at a SAML 2.0 compliant Identity Provider to login to your Drupal website. The | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-003 | drupal/subgroup | This module enables you to add groups to other groups in a tree structure where access can be inherited up or down the t | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-004 | drupal/webform | The [Webform module for Drupal 8/9](https://www.drupal.org/project/webform) includes a default Contact webform, which se | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-005 | drupal/fac | The [Fast Autocomplete module](https://www.drupal.org/project/fac) provides fast IMDB-like suggestions below a text inpu | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-006 | drupal/samlauth | The [SAML Authentication module](https://www.drupal.org/project/samlauth) allows users to authenticate against a SAML id | unknown | 0.0 | – |