Login Request a demo
PH
Product
phpmyfaq
by thorsten · last CVE Oct 25, 2026
92
CVEs
0
On KEV
9.8
Max CVSS
32
New 30D
Vulnerabilities92In the news0Timeline
Severity mix
Critical 4High 34Medium 50Low 4
Severity
All severities92Critical4High34Medium50Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add phpmyfaq to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111911
9.8
1%
Oct 17
phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection
Affected: 4.0.0 before 4.1.9
CVE-2026-46364
9.8
2%
May 15
phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha
Affected: before 4.1.2
CVE-2026-66398
9.4
0%
Jul 27
phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API
Affected: before 4.1.6
CVE-2026-45010
9.1
0%
May 15
phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check Endpoint
Affected: before 4.1.2
Showing 4