Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2021-39327 | bulletproof-security (WordPress plugin) | The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly ac | medium | 5.3 | 72% |
| CVE-2019-11514 | flarum/flarum | Flarum mishandles invalidation of user email tokens | high | 7.5 | 1% |
| CVE-2024-38275 | moodle/moodle | Moodle HTTP authorization header is preserved between "emulated redirects" | high | 7.5 | 0% |