Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2021-4240 | phpservermon/phpservermon | Insufficient Entropy in PHPServerMon PRNG | medium | 5.3 | 1% |
| CVE-2021-4241 | phpservermon/phpservermon | PHPServerMon PRNG has Insufficient Entropy | medium | 5.3 | 1% |
| GHSA-5jfw-35xp-5m42 | pocketmine/bedrock-protocol | Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown | high | 7.5 | – |
| GHSA-6wjw-qf87-fv5v | illuminate/encryption | Laravel Encrypter Failure to decryption vulnerability | low | 0.0 | – |
| GHSA-7852-w36x-6mf6 | laravel/framework | Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior | medium | 0.0 | – |