Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2024-51996 | symfony/security-http, symfony/symfony | Symfony has an Authentication Bypass via RememberMe | high | 7.5 | 1% |
| CVE-2024-2098 | download-manager (WordPress plugin) | The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protec | high | 7.5 | 0% |
| CVE-2024-11283 | jobcareer (WordPress plugin) | The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1. This is due to wp_ajax | high | 7.5 | 0% |
| CVE-2024-45691 | moodle/moodle | Moodle Lesson activity password bypass through PHP loose comparison | medium | 5.4 | 0% |