Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.1, updated 2026-10-28. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2019-11358 | maximebf/debugbar, drupal/core | XSS in jQuery as used in Drupal, Backdrop CMS, and other products | medium | 6.1 | 87% |
| CVE-2018-6195 | wp-splashing-images (WordPress plugin) | admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows authentica | high | 7.2 | 4% |
| CVE-2018-19296 | phpmailer/phpmailer | Phar object injection in PHPMailer | high | 8.8 | 2% |
| CVE-2021-23682 | appwrite/server-ce | Prototype Pollution in litespeed.js and appwrite/server-ce | critical | 9.8 | 2% |
| CVE-2020-11066 | typo3/cms, typo3/cms-core | Class destructors causing side-effects when being unserialized in TYPO3 CMS | high | 8.7 | 2% |
| CVE-2022-39357 | wintercms/winter | Prototype pollution in Snowboard framework | high | 8.1 | 1% |
| CVE-2021-43852 | oro/platform | Client-Side JavaScript Prototype Pollution in oro/platform | medium | 5.3 | 1% |
| CVE-2023-46308 | plotly/plotly.js | plotly.js prototype pollution vulnerability | critical | 9.8 | 1% |
| CVE-2026-81887 | livewire/livewire | Livewire DOM-based cross-site scripting during client-side state handling | medium | 0.0 | 1% |
| CVE-2023-3933 | your-journey (WordPress theme) | The Your Journey theme for WordPress is vulnerable to Reflected Cross-Site Scripting via prototype pollution in versions up to, and includin | medium | 6.1 | 0% |
| CVE-2023-3962 | winters (WordPress theme) | The Winters theme for WordPress is vulnerable to Reflected Cross-Site Scripting via prototype pollution in versions up to, and including, 1. | medium | 6.1 | 0% |
| CVE-2023-3965 | nsc (WordPress theme) | The nsc theme for WordPress is vulnerable to Reflected Cross-Site Scripting via prototype pollution in versions up to, and including, 1.0 du | medium | 6.1 | 0% |