Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2022-0482 | alextselegidis/easyappointments | Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments | critical | 9.1 | 44% |
| CVE-2024-11396 | event-monster (WordPress plugin) | The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all vers | medium | 5.3 | 2% |
| CVE-2021-3980 | elgg/elgg | Information exposure in elgg | high | 7.5 | 2% |
| CVE-2022-2921 | notrinos/notrinos-erp | Exposure of password hashes in notrinos/notrinos-erp | high | 8.8 | 1% |
| CVE-2025-51586 | prestashop/prestashop | Presta Shop vulnerable to email enumeration | medium | 4.2 | 1% |
| CVE-2023-7014 | molongui-authorship (WordPress plugin) | The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive Information Exposure i | medium | 5.3 | 1% |
| CVE-2024-13215 | addon-elements-for-elementor-page-builder (WordPress plugin) | The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13 | medium | 4.3 | 1% |
| CVE-2025-53625 | universal-omega/dynamic-page-list3 | DynamicPageList3 vulnerability exposes hidden/suppressed usernames | high | 0.0 | 1% |
| CVE-2023-2239 | microweber/microweber | Information exposure in microweber | medium | 6.5 | 1% |
| CVE-2024-11712 | wp-job-portal (WordPress plugin) | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access | medium | 5.3 | 0% |
| CVE-2026-35675 | phpmyfaq/phpmyfaq, thorsten/phpmyfaq | phpMyFAQ: Missing Password Reset Token Allows Account Takeover via Username/Email Enumeration | high | 8.2 | 0% |
| CVE-2024-12041 | directorist (WordPress plugin) | The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Informati | medium | 5.3 | 0% |
| CVE-2024-13217 | jeg-elementor-kit (WordPress plugin) | The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.11 via | medium | 4.3 | 0% |
| CVE-2024-13228 | qubely (WordPress plugin) | The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu | medium | 4.3 | 0% |
| CVE-2023-6630 | contact-form-7-dynamic-text-extension (WordPress plugin) | The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, an | medium | 4.3 | 0% |