Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2023-0790 | thorsten/phpmyfaq | Uncaught Exception in thorsten/phpmyfaq | high | 8.8 | 1% |
| CVE-2024-34537 | typo3/cms-backend | Denial of Service in TYPO3 Bookmark Toolbar | low | 2.7 | 1% |
| CVE-2025-66305 | getgrav/grav | Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter | high | 0.0 | 0% |
| CVE-2025-59014 | typo3/cms-backend | TYPO3 Bookmark Toolbar vulnerable to denial of service | medium | 0.0 | 0% |
| CVE-2025-66578 | robrichards/xmlseclibs | robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation | medium | 6.0 | 0% |
| GHSA-c85w-x26q-ch87 | getformwork/formwork | Formwork improperly validates input of User role preventing site and panel availability | high | 8.2 | – |