Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2024-55921 | typo3/cms-extensionmanager | TYPO3 Extension Manager Module vulnerable to Cross-Site Request Forgery | high | 7.5 | 0% |
| CVE-2024-51992 | orchid/platform | Orchid Platform has Method Exposure Vulnerability in Modals | medium | 4.1 | 0% |
| CVE-2024-55924 | typo3/cms-scheduler | TYPO3 Scheduler Module vulnerable to Cross-Site Request Forgery | high | 8.0 | 0% |
| CVE-2024-55893 | typo3/cms-belog | TYPO3 Cross-Site Request Forgery in Log Module | medium | 4.3 | 0% |
| CVE-2024-55894 | typo3/cms-beuser | TYPO3 Cross-Site Request Forgery in Backend User Module | medium | 4.3 | 0% |
| CVE-2024-55945 | typo3/cms-lowlevel | TYPO3 DB Check Module vulnerable to Cross-Site Request Forgery | medium | 4.3 | 0% |
| CVE-2024-55920 | typo3/cms-dashboard | TYPO3 Cross-Site Request Forgery in Dashboard Module | medium | 4.3 | 0% |
| CVE-2024-55923 | typo3/cms-indexed-search | TYPO3 Indexed Search Module vulnerable to Cross-Site Request Forgery | medium | 4.3 | 0% |
| CVE-2024-55922 | typo3/cms-form | TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery | medium | 5.4 | 0% |