Every CVE phpwarden knows about across the PHP engine, Composer packages and WordPress plugins, themes and core — ranked by real-world exploitation. Feed 2026.10.29.4, updated 2026-10-29. Browse by package.
| CVE | Package | Title | Severity | CVSS | EPSS |
|---|---|---|---|---|---|
| CVE-2021-42360 | starter-templates (WordPress plugin) | On sites that also had the Elementor plugin for WordPress installed, it was possible for users with the edit_posts capability, which include | high | 7.6 | 1% |
| CVE-2025-12918 | yungifez/skuul | Skuul School Management System has an Insecure Direct Object Reference (IDOR) Vulnerability in View Fee Invoice | low | 3.1 | 0% |