Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2021-38314 | gutenberg-template-library-\&-redux-framework (WordPress plugin) | The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress registered several AJAX actions available to unauthenticated | medium | 5.3 | 29% |
| CVE-2021-33563 | phanan/koel | Improper rate limiting in Koel | high | 0.0 | 1% |
| CVE-2022-1235 | remdex/livehelperchat | Weak password hash in LiveHelperChat | high | 7.5 | 1% |
| CVE-2023-27580 | codeigniter4/shield | Password Shucking Vulnerability | medium | 5.9 | 1% |
| GHSA-3p7g-wrgg-wq45 | ibexa/graphql | GraphQL queries can expose password hashes | critical | 0.0 | – |