Composer zoujingli/thinkadmin has 6 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2020-25540 | ThinkAdmin directory traversal vulnerability | high | 7.5 | =6.0 | – |
| CVE-2020-23653 | ThinkAdmin insecure unserialize vulnerability | critical | 9.8 | >=4.0 and <6.1.0 | 6.1.0 |
| CVE-2020-35296 | ThinkAdmin Admin Panel Access using Default Credentials | high | 7.5 | =6.0 | – |
| CVE-2019-11018 | ThinkAdmin Administrator cookies still working after password change | critical | 9.8 | =4.0 | – |
| CVE-2023-48966 | ThinkAdmin arbitrary file upload vulnerability | high | 8.8 | <=6.1.53 | – |
| CVE-2020-29315 | Cross-site scripting in ThinkAdmin | medium | 5.4 | <6.0.22 | 6.0.22 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked