Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.11.09.1, updated 2026-11-08. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| DRUPAL-CONTRIB-2022-024 | drupal/custom_breadcrumbs | The Custom Breadcrumbs module provides a variety of options for customizing the breadcrumb trail. The module doesn't su | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-025 | drupal/quickedit | This advisory addresses a similar issue to [Drupal core - Moderately critical - Information disclosure - SA-CORE-2022-00 | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-026 | drupal/entity_reference_tree | This module provides an entity relationship hierarchy tree widget for an entity reference field. The module doesn't suf | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-027 | drupal/govuk_theme | The GOV.UK Theme (`govuk_theme`) is a Drupal theme for the GOV.UK Design System. The theme doesn't sanitize user input | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-028 | drupal/svg_formatter | SVG Formatter module provides support for using SVG images on your website. Our dependency library enshrined/svg-saniti | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-029 | drupal/opigno_learning_path | This module is used as part of the Opigno LMS distribution and implements learning paths for the LMS. The module was pr | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-032 | drupal/cleantalk | This module provides integration with the CleanTalk spam protection service. The module does not properly filter data i | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-035 | drupal/dfp | Doubleclick for Publishers (DFP) module enables a site to place ads from Doubleclick For Publishers. The module doesn't | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-036 | drupal/image_field_caption | Image Field Caption (`image_field_caption`) adds an extra text area for captions on image fields. The module doesn't sa | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-038 | drupal/quick_node_clone | The module adds a "Clone" tab to a node. When clicked, a new node is created and fields from the previous node are popul | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-040 | drupal/wingsuit_companion | The Wingsuit module enables site builders to build UI Patterns (and|or) Twig Components with Storybook and use them with | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-042 | drupal/embed | The Drupal Embed module provides a filter to allow embedding various embeddable items like entities in content fields. | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-044 | drupal/entity_browser_block | Entity Browser Block provides a Block Plugin for every Entity Browser on your site. The module didn't sufficiently chec | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-045 | drupal/apigee_edge | The Apigee Edge module allows connecting a Drupal site to Apigee X / Edge in order to build a developer portal. The deve | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-046 | drupal/lottiefiles_field | The Lottiefiles Field module enables you to integrate the lottiefiles features into your page. The module does not suff | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-047 | drupal/config_terms | This module enables you to create and manage a version of taxonomy based on configuration entities instead of content. T | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-048 | drupal/entity_print | This module enables you to generate print versions of content. Some installations of the module make use of the dompdf | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-050 | drupal/pdf_api | This module enables you to generate PDF versions of content. Some installations of the module make use of the dompdf/do | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-051 | drupal/tagify | This module provides a widget to transform entity reference fields into a more user-friendly tags input component with a | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-052 | drupal/jquery_ui_checkboxradio | jQuery UI is a third-party library used by Drupal. The jQuery UI Checkboxradio module provides the jQuery UI Checkboxrad | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-053 | drupal/commerce_elavon | This module enables you to accept payments from the Elavon payment provider. The module doesn't sufficiently verify tha | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-054 | drupal/next | The Next.js module provides an inline preview for content. Authenticated requests are made to Drupal to fetch JSON:API c | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-055 | drupal/permissions_by_term | This module enables you to restrict content via taxonomy terms and related permissions. The module doesn't sufficiently | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-056 | drupal/permissions_by_term | This module enables you to set content permissions based on taxonomy terms. The module doesn't sufficiently restrict ac | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-058 | drupal/twig_field_value | This module enables themers to get partial data from field render arrays. It gives them more control over the output wit | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-059 | drupal/search_api | This module enables you to build searches using a wide range of features, data sources and backends. The module doesn't | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2022-060 | drupal/socialbase | The Social Base theme is designed as a base theme for Open Social. This base theme holds has a lot of sensible default | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-001 | drupal/private_taxonomy | This module enables users to create 'private' vocabularies. The module doesn't enforce permissions appropriately for th | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-002 | drupal/entity_browser | The Entity Browser module allows you to select entities from entity reference fields using a custom entity browser widge | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-003 | drupal/media_library_block | The Media Library Block module allows you to render a media entity in a block. The module does not properly check media | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-004 | drupal/media_library_form_element | This module enables you to use the media library in custom forms without the Media Library Widget. The module does not | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-005 | drupal/apigee_edge | The Apigee Edge module allows connecting a Drupal site to Apigee X / Edge in order to build a developer portal. Previou | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-006 | drupal/better_social_sharing_buttons | This module enables you to add social sharing buttons to a site. The module doesn't sufficiently sanitize the weight an | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-008 | drupal/group_forum | This module enables you to associate Forums as Group 1.x content and use Group access permissions. Previous versions of | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-009 | drupal/gutenberg | This module provides a new UI experience for node editing - Gutenberg editor. This vulnerability can cause DoS by using | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-010 | drupal/media_responsive_thumbnail | The Media Responsive Thumbnail module allows media reference fields to be rendered as a responsive image. This module d | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-011 | drupal/responsive_media_image | The security team is marking this project unsupported. There is a known security issue with the project that has not bee | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-012 | drupal/xray_audit | This module is a tool for developers, analysts, and administrators that allows them to generate reports on a given Drupa | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-013 | drupal/protected_pages | This module enables you to secure any page with a password. The module does not sufficiently restrict access to the pag | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-014 | drupal/s3fs | S3 File System (s3fs) provides an additional file system to your Drupal site, which stores files in Amazon's Simple Stor | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-016 | drupal/iubenda_integration | The Iubenda Integration module provides a custom block to provide a link to the Iubenda privacy policy. On this block, a | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-017 | drupal/consent_popup | The Consent Popup provides a configurable popup that requires acceptance of a question before the visitor can continue, | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-018 | drupal/addtoany | This module provides social media share & follow buttons. The module doesn't sufficiently check access to a node when r | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-019 | drupal/addtoany | This module provides social media share & follow buttons. The module doesn't sufficiently restrict AddToAny block setti | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-020 | drupal/office_hours | This module enables you to define a 'weekly office hours' field type, and add a field to any Content type, in order to d | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-021 | drupal/civicccookiecontrol | CivicCookieControl is a module that can help make a website compliant with EU and UK cookie legislation. The Civic GovU | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-023 | drupal/gdpr_alert | This module enables you to define configurable GDPR alert messages. The module doesn't sufficiently filter user-supplie | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-024 | drupal/gridstack | This module enables you to create dynamic layouts and add sample color palettes for color selection hints via its UI. T | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-025 | drupal/mailchimp | This module provides integration with Mailchimp, a popular email delivery service. A route related to OAuth authenticat | unknown | 0.0 | – |
| DRUPAL-CONTRIB-2023-026 | drupal/search_autocomplete | This module enables you to use complex autocompletion in forms. The module doesn't sufficiently filter text in the data | unknown | 0.0 | – |