Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.1, updated 2026-10-28. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2023-26154 | pubnub/pubnub | pubnub Insufficient Entropy vulnerability | medium | 5.9 | 1% |
| CVE-2023-49599 | wwbn/avideo | WWBN AVideo Insufficient Entropy vulnerbaility | critical | 9.8 | 1% |
| CVE-2021-4240 | phpservermon/phpservermon | Insufficient Entropy in PHPServerMon PRNG | medium | 5.3 | 1% |
| CVE-2021-4241 | phpservermon/phpservermon | PHPServerMon PRNG has Insufficient Entropy | medium | 5.3 | 1% |
| CVE-2023-3325 | cms-commander-client (WordPress plugin) | The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signat | high | 8.1 | 1% |
| CVE-2026-42155 | openmage/magento-lts | Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs | critical | 0.0 | 0% |
| CVE-2026-34236 | auth0/auth0-php | Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption | high | 8.2 | 0% |
| CVE-2025-59015 | typo3/cms-core | TYPO3 CMS uses insufficient entropy when generating passwords | medium | 6.5 | 0% |
| GHSA-fmg6-246m-9g2v | auth0/login | Auth0 laravel-auth0 SDK has Insufficient Entropy in Cookie Encryption | high | 8.2 | – |
| GHSA-ghc5-95c2-vwcv | auth0/symfony | Auth0 Symfony SDK has Insufficient Entropy in Cookie Encryption | high | 8.2 | – |
| GHSA-vfpx-q664-h93m | auth0/wordpress | Auth0 WordPress Plugin has Insufficient Entropy in Cookie Encryption | high | 8.2 | – |
| GHSA-848f-mph5-9pm9 | zendframework/zendframework1 | Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability | high | 7.5 | – |
| GHSA-8xhv-gqm4-3w99 | zendframework/zendframework1 | ZendFramework1 Potential Insufficient Entropy Vulnerability | high | 7.5 | – |
| GHSA-mg4x-prh7-g4mx | zendframework/zend-captcha | Zend-Captcha Information Disclosure and Insufficient Entropy vulnerability | high | 7.5 | – |
| GHSA-2fhr-8r8r-qp56 | zendframework/zendframework | ZendFramework Information Disclosure and Insufficient Entropy vulnerability | medium | 5.3 | – |
| GHSA-3fmq-x9q6-wm39 | paragonie/random_compat | random_compat Uses insecure CSPRNG | low | 0.0 | – |
| GHSA-h97c-qp24-439v | laravel/socialite | Insecure State Generation in laravel/socialite | medium | 0.0 | – |
| GHSA-pjx8-984p-7p3x | friendsofsymfony/user-bundle | FOSUserBundle Entropy is lost in the TokenGenerator | medium | 0.0 | – |