Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.1, updated 2026-10-28. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2022-1801 | very-simple-contact-form (WordPress plugin) | The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact form, both as hidden i | high | 7.5 | 1% |
| CVE-2023-6963 | getwid (WordPress plugin) | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4. This makes it po | medium | 5.3 | 1% |
| CVE-2022-4036 | appointment-hour-booking (WordPress plugin) | The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to t | medium | 5.3 | 0% |
| CVE-2025-1262 | advanced-google-recaptcha (WordPress plugin) | The Advanced Google reCaptcha plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.27 . This makes it po | medium | 5.3 | 0% |
| CVE-2026-40935 | wwbn/avideo | CAPTCHA Bypass in WWBN/AVideo via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure | medium | 5.3 | 0% |