Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2022-3754 | thorsten/phpmyfaq | phpMyFAQ contains Weak Password Requirements | critical | 9.8 | 2% |
| CVE-2022-22110 | bottelet/flarepoint | Weak Password Requirements in Daybyday CRM | high | 7.5 | 1% |
| CVE-2022-2927 | notrinos/notrinos-erp | Missing password strength check in notrinos/notrinos-erp | high | 7.3 | 1% |
| CVE-2023-1753 | thorsten/phpmyfaq | phpMyFAQ has weak password requirements | medium | 5.5 | 1% |
| CVE-2023-0793 | thorsten/phpmyfaq | Weak Password Requirements in thorsten/phpmyfaq | high | 8.8 | 1% |
| CVE-2023-0307 | thorsten/phpmyfaq | phpMyFAQ has Weak Password Requirements | medium | 0.0 | 1% |
| CVE-2023-0564 | froxlor/froxlor | Froxlor contains Weak Password Requirements | high | 7.5 | 0% |
| CVE-2025-11322 | novosga/novosga | NovoSGA: Manipulation of User Creation Page can lead to weak password requirements | low | 3.7 | 0% |
| CVE-2025-65014 | librenms/librenms | LibreNMS has Weak Password Policy | low | 3.7 | 0% |