Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2023-45363 | mediawiki/core | MediaWiki Denial of Service vulnerability | high | 7.5 | 24% |
| CVE-2026-43871 | apache/thrift | Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop | high | 7.5 | 1% |
| CVE-2023-23617 | openmage/magento-lts | DoS vulnerability in MaliciousCode filter | medium | 4.9 | 1% |
| CVE-2023-27560 | phpseclib/phpseclib | phpseclib Infinite Loop vulnerability | high | 7.5 | 1% |
| CVE-2024-29904 | codeigniter4/framework | CodeIgniter4 DoS Vulnerability | high | 7.5 | 1% |
| CVE-2026-84997 | react/http | react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU | high | 7.5 | 1% |
| CVE-2024-11941 | drupal/core | The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests th | high | 7.5 | 0% |
| CVE-2026-59933 | phpoffice/phpspreadsheet | PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion | high | 7.5 | 0% |