Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.11.09.1, updated 2026-11-08. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| DRUPAL-CONTRIB-2021-007 | drupal/gutenberg | This module provides a new UI experience for node editing using the Gutenberg Editor library. The module did not correc | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-008 | drupal/facets | This module enables you to add customizable facets on search pages, from core search or searches provided by Search API. | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-009 | drupal/ctools | Chaos tool suite (ctools) module provides a number of APIs and extensions for Drupal, it's 8.x-3.x branch is a start fro | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-013 | drupal/graphql | This module lets you craft and expose a GraphQL web service API. The module does not sufficiently protect arbitrary exc | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-014 | drupal/openid_connect | This module allows users to authenticate against an Oauth 2.0 / OpenID Connect identity provider to login to your Drupal | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-015 | drupal/ctools | Chaos tool suite (ctools) module provides a number of APIs and extensions for Drupal, its 8.x-3.x branch is a start from | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-016 | drupal/linky_revision_ui | This module provides a revision UI to Linky entities. The module doesn't sufficiently respect access restrictions to ce | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-017 | drupal/block_content_revision_ui | This module provides a revision UI to Block Content entities. The module doesn't sufficiently respect access restrictio | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-018 | drupal/opigno_learning_path | This project is related to Opigno LMS distribution. It implements the learning path, that combines together in a very fl | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-019 | drupal/opigno_group_manager | This project is related to Opigno LMS distribution. It implements the group manager in the Opigno LMS. The module does | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-020 | drupal/apigee_edge | The Apigee Edge module allows connecting a Drupal site to Apigee Edge in order to build a developer portal. The module | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-021 | drupal/linky_revision_ui | This module provides a revision UI for Linky entities. The module doesn't sufficiently respect access restrictions to c | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-022 | drupal/block_content_revision_ui | This module provides a revision UI for Block Content entities. The module doesn't sufficiently respect access restricti | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-023 | drupal/form_mode_manager | This module provides a user interface that allows the implementation and use of *Form modes* without custom development. | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-024 | drupal/pages_restriction | This project enables administrators to restrict access from anonymous and regular users to pre-defined pages. The admin | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-025 | drupal/admin_toolbar | The *Admin Toolbar* (`admin_toolbar`) module extends the default toolbar provided by Drupal Core with various features f | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-026 | drupal/webform | The Webform module uses the [CKEditor](https://github.com/ckeditor/ckeditor4), library for WYSIWYG editing. CKEditor has | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-030 | drupal/user_hash | This module enables you to create an individual hash for each user. These hashes can be used for authentication instead | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-031 | drupal/cshs | The module provides a field widget for selecting taxonomy terms in a hierarchical fashion. The module doesn't sanitize | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-032 | drupal/commerce | This module provides a system for building an ecommerce solution in their Drupal site. The module doesn't sufficiently | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-033 | drupal/file_extractor | This module enables you to extract the textual content of files for use on a website, e.g. to display it or use it in se | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-035 | drupal/taxonomy_manager | This module provides a powerful interface for managing a taxonomy vocabulary. A vocabulary gets displayed in a dynamic t | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-036 | drupal/miniorange_saml | This module provides a solution to authenticate visitors using existing SAML providers. Certain non-default configurati | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-037 | drupal/domain_group | This module enables sites to define a domain from Domain Access that points directly to a group page. The module doesn' | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-038 | drupal/tb_megamenu | This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media cont | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-039 | drupal/tb_megamenu | This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media cont | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-040 | drupal/tb_megamenu | This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media cont | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-041 | drupal/tb_megamenu | This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media cont | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-042 | drupal/linkit | Linkit provides an easy interface for internal and external linking with WYSIWYG editors by using an autocomplete field. | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-043 | drupal/loft_data_grids | This module enables aklump/loft\_data\_grids to be used as a Drupal module. Excel support was provided by <https://pack | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-044 | drupal/openid_connect_windows_aad | This module enables users to authenticate through their Microsoft Azure AD account. The module does not sufficiently ch | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-045 | drupal/webform | ### Access Bypass: This module enables you to build forms and surveys in Drupal. The module doesn't sufficiently check | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2021-047 | drupal/mail_login | This modules enables users to login via email address. This module does not sufficiently check user status when authent | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-001 | drupal/super_login | This module enables you to login with an email address. The module doesn't sufficiently check if a user account is acti | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-002 | drupal/simple_oauth | This module enables you to implement OAuth 2.0 authentication for Drupal. The module doesn't sufficiently verify client | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-004 | drupal/jquery_ui_datepicker | jQuery UI is a third-party library used by Drupal. The jQuery UI Datepicker module provides the jQuery UI Datepicker lib | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-005 | drupal/anonymousredirect | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-006 | drupal/tac_lite | Update 2022-03-01. New maintainers have volunteered for the project and created a new release which includes fixes for t | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-008 | drupal/admin_toolbar_search | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-009 | drupal/expire_reset_pass_link | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-012 | drupal/swiftype | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-013 | drupal/business_responsive_theme | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-014 | drupal/private_taxonomy | This module enables users to create 'private' vocabularies. The module doesn't sufficiently check user access permissio | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-015 | drupal/exif | This module enables you to automatically scan images uploaded to the site to extract their meta data and store it in tax | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-016 | drupal/vppr | **Update** Maintainers stepped forward, fixed the security issue, and Vocabulary Permissions Per Role is supported aga | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-017 | drupal/media_entity_flickr | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-018 | drupal/cog | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-019 | drupal/vendor_stream_wrapper | This module provides a stream wrapper for files located in the vendor directory. Even when the vendor directory is moved | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-021 | drupal/image_export_import | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-023 | drupal/fancy_file_delete | This module enables you to manage and delete files. The module doesn't sufficiently protect unmanaged files from view u | unknown | 0.0 | – |