Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2020-11026 | WordPress core | In affected versions of WordPress, files with a specially crafted name when uploaded to the Media section can lead to script execution upon | high | 8.7 | 2% |
| CVE-2020-11030 | WordPress core | In affected versions of WordPress, a special payload can be crafted that can lead to scripts getting executed within the search block of the | medium | 6.4 | 1% |