Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2015-5237 | google/protobuf | protobuf susceptible to buffer overflow | high | 8.8 | 5% |
| CVE-2023-34620 | laktak/hjson | hjson stack exhaustion vulnerability | high | 7.5 | 1% |
| CVE-2026-33183 | saloonphp/saloon | Saloon has a Fixture Name Path Traversal Vulnerability | medium | 0.0 | 1% |
| CVE-2026-59948 | composer/composer | Composer: Arbitrary file write outside vendor via malicious transitive package name | high | 7.0 | 0% |