Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.1, updated 2026-10-28. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2022-41876 | ezsystems/ezplatform-graphql | ezplatform-graphql GraphQL queries can expose password hashes | high | 7.5 | 1% |
| CVE-2022-0724 | microweber/microweber | Insecure Storage of Sensitive Information in Microweber | high | 0.0 | 1% |
| CVE-2020-29603 | mantisbt/mantisbt | MantisBT Insecure Storage in manage_proj_edit_page.php | medium | 4.3 | 1% |
| CVE-2021-36786 | miniorange/miniorange-saml | Sensitive Data Exposure in miniorange_saml | high | 7.5 | 1% |
| CVE-2024-3717 | drag-and-drop-multiple-file-upload-contact-form-7 (WordPress plugin) | The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions | medium | 5.3 | 1% |
| CVE-2023-6565 | iwp-client (WordPress plugin) | The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.12.3 via | medium | 5.9 | 1% |
| CVE-2023-2665 | francoisjacquet/rosariosis | RosarioSIS Stores Sensitive Data in a Mechanism without Access Control | high | 7.5 | 1% |
| CVE-2024-3678 | blog2social (WordPress plugin) | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up | medium | 5.3 | 1% |
| CVE-2024-5598 | file-manager-advanced (WordPress plugin) | The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 v | high | 7.5 | 1% |
| CVE-2024-5599 | fileorganizer (WordPress plugin) | The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions | high | 7.5 | 1% |
| CVE-2024-12315 | wp-ultimate-exporter (WordPress plugin) | The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions | high | 7.5 | 0% |
| CVE-2024-2974 | essential-addons-for-elementor-lite (WordPress plugin) | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Se | medium | 5.3 | 0% |
| CVE-2024-3733 | essential-addons-for-elementor-lite (WordPress plugin) | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Se | medium | 5.3 | 0% |
| CVE-2024-10028 | everest-backup (WordPress plugin) | The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information | high | 7.5 | 0% |
| CVE-2023-6962 | wp-meta-seo (WordPress plugin) | The WP Meta SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.12 via the me | medium | 5.3 | 0% |
| CVE-2024-8899 | jeg-elementor-kit (WordPress plugin) | The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via t | medium | 4.3 | 0% |
| CVE-2024-43427 | moodle/moodle | Moodle admin presets export tool includes some secrets that should not be exported | low | 3.7 | 0% |
| CVE-2023-6748 | custom-field-template (WordPress plugin) | The Custom Field Template plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 v | medium | 4.3 | 0% |