phpmyfaq vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

PH

Product

phpmyfaq

by thorsten · last CVE Oct 25, 2026

107

CVEs

0

On KEV

9.8

Max CVSS

32

New 30D

Vulnerabilities107 In the news0 Timeline

Severity mix

Critical 5High 40Medium 57Low 5

Severity

All severities107 Critical5 High40 Medium57 Low5

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add phpmyfaq to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-45009	4.3	0%	May 15	phpMyFAQ - Insufficient Authorization Check in Admin API Endpoints Affected: 4.1.1 before 4.1.2
CVE-2026-45007	4.3	0%	May 15	phpMyFAQ - Missing Permission Check on 12 Configuration API Endpoints Allows Information Disclosure Affected: before 4.1.2
CVE-2026-85592	3.7	0%	Sep 4	phpMyFAQ before 4.1.8 Authorization Bypass via question/create Affected: before 4.1.8
CVE-2026-108851	3.3	0%	Oct 11	phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool Affected: 4.1.0 through 4.1.10
CVE-2026-111888	2.7	0%	Oct 17	phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update API Affected: 4.0.0 before 4.1.9
CVE-2026-48488	2.7	0%	Jun 8	phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing Affected: < 4.1.4
CVE-2024-29196	2.7	1%	Mar 26	phpMyFAQ Path Traversal in Attachments Affected: = 3.2.5