How many CVEs does phpmyfaq phpmyfaq have?

phpmyfaq phpmyfaq has 190 published CVE records since 2005.

How many phpmyfaq phpmyfaq CVEs are in CISA KEV?

None of phpmyfaq phpmyfaq's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for phpmyfaq phpmyfaq vulnerabilities?

Yes — 160 of phpmyfaq phpmyfaq's CVEs have a known public exploit.

Which versions of phpmyfaq phpmyfaq are affected?

255 distinct phpmyfaq phpmyfaq versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in phpmyfaq phpmyfaq CVEs?

phpmyfaq phpmyfaq's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-862 (Missing Authorization).

How many critical phpmyfaq phpmyfaq vulnerabilities are there?

phpmyfaq phpmyfaq has 19 critical and 65 high-severity CVEs.

What is the average severity of phpmyfaq phpmyfaq CVEs?

The average CVSS base score across phpmyfaq phpmyfaq's scored CVEs is 6.9.

phpmyfaq Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every phpmyfaq version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.1.1220 CVEs
<= 2.9.813 CVEs
1.5.1 <= v <= 1.5.112 CVEs
< 4.1.211 CVEs
< 3.1.1110 CVEs
< 4.1.710 CVEs
< 3.1.109 CVEs
3.2.5 <= v <= 3.2.58 CVEs
< 4.1.87 CVEs
1.3.12 <= v <= 1.3.127 CVEs
1.4.0 <= v <= 1.4.07 CVEs
1.5 <= v <= 1.57 CVEs
1.5.3 <= v <= 1.5.37 CVEs
< 2.8.136 CVEs
< 4.1.66 CVEs
1.0 <= v <= 1.06 CVEs
1.0.1 <= v <= 1.0.16 CVEs
1.0.1a <= v <= 1.0.1a6 CVEs
1.1.0 <= v <= 1.1.06 CVEs
1.1.1 <= v <= 1.1.16 CVEs
1.1.2 <= v <= 1.1.26 CVEs
1.1.3 <= v <= 1.1.36 CVEs
1.1.4 <= v <= 1.1.46 CVEs
1.1.4a <= v <= 1.1.4a6 CVEs
1.1.5 <= v <= 1.1.56 CVEs
1.2.0 <= v <= 1.2.06 CVEs
1.2.1 <= v <= 1.2.16 CVEs
1.2.2 <= v <= 1.2.26 CVEs
1.2.3 <= v <= 1.2.36 CVEs
1.2.4 <= v <= 1.2.46 CVEs
1.2.5 <= v <= 1.2.56 CVEs
1.2.5a <= v <= 1.2.5a6 CVEs
1.2.5b <= v <= 1.2.5b6 CVEs
1.3.0 <= v <= 1.3.06 CVEs
1.3.1 <= v <= 1.3.16 CVEs
1.3.10 <= v <= 1.3.106 CVEs
1.3.11 <= v <= 1.3.116 CVEs
1.3.13 <= v <= 1.3.136 CVEs
1.3.14 <= v <= 1.3.146 CVEs
1.3.2 <= v <= 1.3.26 CVEs
1.3.3 <= v <= 1.3.36 CVEs
1.3.4 <= v <= 1.3.46 CVEs
1.3.5 <= v <= 1.3.56 CVEs
1.3.6 <= v <= 1.3.66 CVEs
1.3.7 <= v <= 1.3.76 CVEs
1.3.8 <= v <= 1.3.86 CVEs
1.3.9 <= v <= 1.3.96 CVEs
1.4 <= v <= 1.46 CVEs
1.4.0a <= v <= 1.4.0a6 CVEs
1.4.1 <= v <= 1.4.16 CVEs
1.4.10 <= v <= 1.4.106 CVEs
1.4.11 <= v <= 1.4.116 CVEs
1.4.2 <= v <= 1.4.26 CVEs
1.4.3 <= v <= 1.4.36 CVEs
1.4.4 <= v <= 1.4.46 CVEs
1.4.5 <= v <= 1.4.56 CVEs
1.4.6 <= v <= 1.4.66 CVEs
1.4.7 <= v <= 1.4.76 CVEs
1.4.8 <= v <= 1.4.86 CVEs
1.4.9 <= v <= 1.4.96 CVEs
1.5.0 <= v <= 1.5.06 CVEs
1.5.2 <= v <= 1.5.26 CVEs
1.5.4 <= v <= 1.5.46 CVEs
1.5.5 <= v <= 1.5.56 CVEs
1.5.6 <= v <= 1.5.66 CVEs
1.5.7 <= v <= 1.5.76 CVEs
1.5.8 <= v <= 1.5.86 CVEs
1.5.9 <= v <= 1.5.96 CVEs
1.6.0 <= v <= 1.6.06 CVEs
1.6.1 <= v <= 1.6.16 CVEs
1.6.2 <= v <= 1.6.26 CVEs
1.6.3 <= v <= 1.6.36 CVEs
1.6.4 <= v <= 1.6.46 CVEs
1.6.5 <= v <= 1.6.56 CVEs
1.6.6 <= v <= 1.6.66 CVEs
1.6.7 <= v <= 1.6.76 CVEs
1.6.8 <= v <= 1.6.86 CVEs
1.6.10 <= v <= 1.6.105 CVEs
1.6.11 <= v <= 1.6.115 CVEs
1.6.12 <= v <= 1.6.125 CVEs
1.6.9 <= v <= 1.6.95 CVEs
2.0.0 <= v <= 2.0.05 CVEs
2.0.1 <= v <= 2.0.15 CVEs
2.0.10 <= v <= 2.0.105 CVEs
2.0.11 <= v <= 2.0.115 CVEs
2.0.12 <= v <= 2.0.125 CVEs
2.0.13 <= v <= 2.0.135 CVEs
2.0.14 <= v <= 2.0.145 CVEs
2.0.15 <= v <= 2.0.155 CVEs
2.0.2 <= v <= 2.0.25 CVEs
2.0.3 <= v <= 2.0.35 CVEs
2.0.4 <= v <= 2.0.45 CVEs
2.0.5 <= v <= 2.0.55 CVEs
2.0.6 <= v <= 2.0.65 CVEs
2.0.7 <= v <= 2.0.75 CVEs
2.0.8 <= v <= 2.0.85 CVEs
2.0.9 <= v <= 2.0.95 CVEs
2.5.0 <= v <= 2.5.05 CVEs
2.5.1 <= v <= 2.5.15 CVEs
< 3.1.134 CVEs
< 3.1.184 CVEs
< 3.1.84 CVEs
< 4.1.14 CVEs
< 4.1.34 CVEs
>= 4.1.54 CVEs
2.0.16 <= v <= 2.0.164 CVEs
2.0.17 <= v <= 2.0.174 CVEs
2.5.2 <= v <= 2.5.24 CVEs
2.5.3 <= v <= 2.5.34 CVEs
2.6.0 <= v <= 2.6.04 CVEs
2.6.1 <= v <= 2.6.14 CVEs
2.6.11 <= v <= 2.6.114 CVEs
2.6.12 <= v <= 2.6.124 CVEs
2.6.13 <= v <= 2.6.134 CVEs
2.6.2 <= v <= 2.6.24 CVEs
2.6.3 <= v <= 2.6.34 CVEs
2.6.4 <= v <= 2.6.44 CVEs
2.6.5 <= v <= 2.6.54 CVEs
2.6.6 <= v <= 2.6.64 CVEs
2.6.7 <= v <= 2.6.74 CVEs
< 3.1.93 CVEs
< 3.2.23 CVEs
< 3.2.53 CVEs
< 4.0.173 CVEs
< 4.1.53 CVEs
0.60 <= v <= 0.603 CVEs
0.65 <= v <= 0.653 CVEs
0.666 <= v <= 0.6663 CVEs
0.70 <= v <= 0.703 CVEs
0.80 <= v <= 0.803 CVEs
0.80a <= v <= 0.80a3 CVEs
0.85 <= v <= 0.853 CVEs
0.86 <= v <= 0.863 CVEs
0.87 <= v <= 0.873 CVEs
0.90 <= v <= 0.903 CVEs
0.95 <= v <= 0.953 CVEs
1.4_alpha1 <= v <= 1.4_alpha13 CVEs
1.4a <= v <= 1.4a3 CVEs
2.5.4 <= v <= 2.5.43 CVEs
2.5.5 <= v <= 2.5.53 CVEs
2.5.6 <= v <= 2.5.63 CVEs
2.5.7 <= v <= 2.5.73 CVEs
2.6.10 <= v <= 2.6.103 CVEs
2.6.14 <= v <= 2.6.143 CVEs
2.6.15 <= v <= 2.6.153 CVEs
2.6.16 <= v <= 2.6.163 CVEs
2.6.17 <= v <= 2.6.173 CVEs
2.6.18 <= v <= 2.6.183 CVEs
2.6.8 <= v <= 2.6.83 CVEs
2.6.9 <= v <= 2.6.93 CVEs
2.7.0 <= v <= 2.7.03 CVEs
3.2.0 <= v <= 3.2.03 CVEs
4.1.0 <= v <= 4.1.03 CVEs
< 2.9.112 CVEs
< 3.1.142 CVEs
< 3.1.162 CVEs
< 3.1.172 CVEs
< 3.2.02 CVEs
< 3.2.12 CVEs
<= 1.6.72 CVEs
<= 2.8.52 CVEs
1.3.9pl1 <= v <= 1.3.9pl12 CVEs
1.4_alpha2 <= v <= 1.4_alpha22 CVEs
1.5_alpha1 <= v <= 1.5_alpha12 CVEs
1.5_alpha2 <= v <= 1.5_alpha22 CVEs
1.5_beta1 <= v <= 1.5_beta12 CVEs
1.5_beta2 <= v <= 1.5_beta22 CVEs
1.5_beta3 <= v <= 1.5_beta32 CVEs
2.7.1 <= v <= 2.7.12 CVEs
2.7.2 <= v <= 2.7.22 CVEs
2.7.3 <= v <= 2.7.32 CVEs
2.7.4 <= v <= 2.7.42 CVEs
2.7.5 <= v <= 2.7.52 CVEs
2.7.6 <= v <= 2.7.62 CVEs
2.7.7 <= v <= 2.7.72 CVEs
2.7.8 <= v <= 2.7.82 CVEs
2.7.9 <= v <= 2.7.92 CVEs
2.8.0 <= v <= 2.8.02 CVEs
2.8.1 <= v <= 2.8.12 CVEs
2.8.2 <= v <= 2.8.22 CVEs
2.8.3 <= v <= 2.8.32 CVEs
2.8.4 <= v <= 2.8.42 CVEs
4.1.1 <= v < 4.1.22 CVEs
< 3.2.0-beta.21 CVE
< 3.2.101 CVE
< 4.0.01 CVE
< 4.0.141 CVE
< 4.0.161 CVE
< 4.0.181 CVE
< 4.1.41 CVE
< 4.1.91 CVE
< 4.2.0-alpha.21 CVE
<= 1.6.91 CVE
<= 2.0.161 CVE
<= 2.5.41 CVE
<= 2.6.81 CVE
<= 2.9.61 CVE
<= 2.9.71 CVE
<= 3.1.141 CVE
<= 3.1.71 CVE
>= 3.1.121 CVE
>= 3.2.51 CVE
>= 4.1.41 CVE
1.5_rc1 <= v <= 1.5_rc11 CVE
1.5_rc2 <= v <= 1.5_rc21 CVE
1.5_rc3 <= v <= 1.5_rc31 CVE
1.5_rc4 <= v <= 1.5_rc41 CVE
1.5_rc5 <= v <= 1.5_rc51 CVE
3.1.0 <= v < 4.1.61 CVE
3.1.12 <= v <= 3.1.121 CVE
3.2.10 <= v < 4.0.21 CVE
3.2.5 <= v < 3.2.61 CVE
4.0.0 <= v <= 4.0.01 CVE
4.0.14 <= v < 4.0.161 CVE
4.0.7 <= v <= 4.0.71 CVE
4.1.0 <= v < 4.1.51 CVE
4.1.0 <= v <= 4.1.101 CVE
4.2.0 <= v < 4.1.71 CVE
4.2.0-alpha <= v < 4.2.0-beta1 CVE

Fixed in

3.1.1220 CVEs
4.1.213 CVEs
3.1.1110 CVEs
4.1.710 CVEs
3.1.109 CVEs
4.1.67 CVEs
4.1.87 CVEs
2.8.136 CVEs
3.1.134 CVEs
3.1.184 CVEs
3.1.84 CVEs
4.1.14 CVEs
4.1.34 CVEs
4.1.54 CVEs

Find a version

190 CVEs

Sort

phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint
CVE-2026-109573
Public exploit
Patch
CWE-89
Critical · CVSS 9.2
EPSS 0.3% (17th pct)2026-10-12
phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool
CVE-2026-108851
Public exploit
Patch
CWE-862
Medium · CVSS 4.8
EPSS 0.1% (1th pct)2026-10-11
phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode
CVE-2026-85593
Patch
CWE-79
Medium · CVSS 5.1
EPSS 0.2% (13th pct)2026-09-04
phpMyFAQ before 4.1.8 Authorization Bypass via question/create
CVE-2026-85592
Public exploit
Patch
CWE-863
Medium · CVSS 6.3
EPSS 0.3% (22th pct)2026-09-04
phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change
CVE-2026-85591
Patch
CWE-620
High · CVSS 7.1
EPSS 0.5% (43th pct)2026-09-04
phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disable
CVE-2026-85590
Public exploit
Patch
CWE-308
High · CVSS 7.1
EPSS 0.5% (43th pct)2026-09-04
phpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard API
CVE-2026-85589
Public exploit
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.5% (41th pct)2026-09-04
phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export
CVE-2026-85588
Patch
CWE-200
Medium · CVSS 5.3
EPSS 0.5% (44th pct)2026-09-04
phpMyFAQ before 4.1.8 Incorrect Authorization via Admin Pages
CVE-2026-85587
Public exploit
Patch
CWE-863
Medium · CVSS 5.3
EPSS 0.4% (29th pct)2026-09-04
phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter
CVE-2026-85586
Patch
CWE-799
Medium · CVSS 6.9
EPSS 0.5% (41th pct)2026-09-04
phpMyFAQ before 4.1.7 Missing Authorization via child resources
CVE-2026-76215
Public exploit
Patch
CWE-862
Medium · CVSS 6.9
EPSS 0.4% (27th pct)2026-08-19
phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
CVE-2026-76214
Patch
CWE-294
Critical · CVSS 9.1
EPSS 0.4% (32th pct)2026-08-19
phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle
CVE-2026-76213
Public exploit
Patch
CWE-307
Critical · CVSS 9.1
EPSS 0.4% (38th pct)2026-08-19
phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL
CVE-2026-76212
Public exploit
Patch
CWE-88
Medium · CVSS 6.9
EPSS 0.4% (36th pct)2026-08-19
phpMyFAQ before 4.1.7 Information Disclosure via Admin API
CVE-2026-76211
Public exploit
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.3% (21th pct)2026-08-19
phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
CVE-2026-76210
Public exploit
Patch
CWE-73
High · CVSS 7.1
EPSS 0.4% (35th pct)2026-08-19
phpMyFAQ before v4.1.6 Registration Bypass via API
CVE-2026-76209
Public exploit
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.3% (20th pct)2026-08-19
phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP
CVE-2026-76208
Public exploit
Patch
CWE-778
High · CVSS 8.8
EPSS 0.4% (37th pct)2026-08-19
phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie
CVE-2026-76207
Patch
CWE-304
High · CVSS 8.6
EPSS 0.5% (38th pct)2026-08-19
phpMyFAQ before 4.1.7 Information Disclosure via PDF Export
CVE-2026-76206
Patch
CWE-200
Medium · CVSS 6.9
EPSS 0.4% (28th pct)2026-08-19
phpMyFAQ before 4.1.7 SQL Injection via Glossary
CVE-2026-76205
Public exploit
Patch
CWE-89
High · CVSS 8.6
EPSS 0.4% (36th pct)2026-08-19
phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP
CVE-2026-75920
Public exploit
Patch
CWE-377
Medium · CVSS 6.0
EPSS 0.4% (28th pct)2026-08-19
phpMyFAQ before 4.1.7 Authentication Bypass via Setup API
CVE-2026-75919
Public exploit
Patch
CWE-306
Medium · CVSS 6.9
EPSS 0.5% (45th pct)2026-08-19
phpMyFAQ before 4.1.7 Authentication Bypass via Tracking File
CVE-2026-75918
Public exploit
Patch
CWE-200
High · CVSS 8.7
EPSS 0.5% (41th pct)2026-08-19
phpMyFAQ before 4.1.6 Privilege Escalation via Group Membership
CVE-2026-66399
Public exploit
Patch
CWE-269
High · CVSS 8.5
EPSS 0.4% (33th pct)2026-07-27
phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API
CVE-2026-66398
Public exploit
Patch
CWE-494
Critical · CVSS 9.4
EPSS 0.3% (26th pct)2026-07-27
phpMyFAQ before 4.1.6 Path Traversal via category image deletion
CVE-2026-66397
Public exploit
Patch
CWE-22
High · CVSS 8.6
EPSS 0.5% (40th pct)2026-07-27
phpMyFAQ - Privilege Escalation via Missing SuperAdmin Guard in user/add Endpoint
CVE-2026-57996
Public exploit
Patch
CWE-269
High · CVSS 8.7
EPSS 0.4% (37th pct)2026-07-15
phpMyFAQ - Information Disclosure of Inactive FAQ Content via Public API Endpoints
CVE-2026-57994
Public exploit
Patch
CWE-200
Medium · CVSS 6.9
EPSS 0.4% (28th pct)2026-07-10
phpMyFAQ - Authenticated Path Traversal in PDF Export via concatenatePaths Function
CVE-2026-57961
Patch
CWE-22
Medium · CVSS 5.1
EPSS 0.4% (33th pct)2026-07-10

Showing 30 of 190

phpmyfaq Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other phpmyfaq products

Frequently asked questions

References

Track phpmyfaq vulnerabilities