Login Request a demo
PH
Product
phpmyfaq
by thorsten · last CVE Oct 25, 2026
108
CVEs
0
On KEV
9.8
Max CVSS
32
New 30D
Vulnerabilities108In the news0Timeline
Severity mix
Critical 5High 40Medium 58Low 5
Severity
All severities108Critical5High40Medium58Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add phpmyfaq to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111911
9.8
1%
Oct 17
phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection
Affected: 4.0.0 before 4.1.9
CVE-2026-46364
9.8
2%
May 15
phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha
Affected: before 4.1.2
CVE-2025-59943
9.8
0%
Oct 3
phpMyFAQ duplicate email registration allows multiple accounts with the same email
Affected: >= 4.0.7, < 4.0.13
CVE-2026-66398
9.4
0%
Jul 27
phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API
Affected: before 4.1.6
CVE-2026-45010
9.1
0%
May 15
phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check Endpoint
Affected: before 4.1.2
Showing 5