Login Request a demo
TH
Vendor
thorsten
2 products with CVEs on record
90
CVEs
0
On KEV
32
New 30D
Products
PH
phpmyfaq
thorsten
9.8
86 CVEs0 on KEV32 new
TH
thorsten/phpmyfaq
thorsten
9.8
4 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116183
New
PH
phpMyFAQ
thorsten
7.5
0%
Oct 25phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID
CVE-2026-116182
New
PH
phpMyFAQ
thorsten
5.0
0%
Oct 25phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching
CVE-2026-111911
PH
phpMyFAQ
thorsten
9.8
1%
Oct 17phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection
CVE-2026-111910
PH
phpMyFAQ
thorsten
6.5
0%
Oct 17phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Authorization Bypass via attachment.php Downloads
CVE-2026-111909
PH
phpMyFAQ
thorsten
8.1
0%
Oct 17phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API
CVE-2026-111908
PH
phpMyFAQ
thorsten
8.3
0%
Oct 17phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST API
CVE-2026-111907
PH
phpMyFAQ
thorsten
7.1
0%
Oct 17phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update-database
CVE-2026-111906
PH
phpMyFAQ
thorsten
6.5
0%
Oct 17phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations
CVE-2026-111905
PH
phpMyFAQ
thorsten
6.0
0%
Oct 17phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta IDOR Leaks TOTP Secret via /admin/api/user/data
CVE-2026-111904
PH
phpMyFAQ
thorsten
5.3
0%
Oct 17phpMyFAQ 4.2.0-alpha before 4.2.0-beta Information Disclosure via open-questions API
CVE-2026-111903
PH
phpMyFAQ
thorsten
5.4
0%
Oct 17phpMyFAQ 4.2.0-alpha before 4.2.0-beta Stored XSS via SVG DTD Entity Bypass
CVE-2026-111902
PH
phpMyFAQ
thorsten
5.3
0%
Oct 17phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass via Comments and Attachments API
CVE-2026-111901
PH
phpMyFAQ
thorsten
7.5
0%
Oct 17phpMyFAQ 4.2.0-alpha before 4.2.0-beta Unauthenticated DoS via API Pagination
CVE-2026-111900
PH
phpMyFAQ
thorsten
4.3
0%
Oct 17phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Draft FAQ Attachment Disclosure via attachment.php
CVE-2026-111898
PH
phpMyFAQ
thorsten
7.5
0%
Oct 17phpMyFAQ 4.2.0-alpha before 4.2.0-beta Account Takeover via Keycloak Implicit Account Linking
CVE-2026-111897
PH
phpMyFAQ
thorsten
7.1
0%
Oct 17phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass in Attachment Administration Endpoints
CVE-2026-111896
PH
phpMyFAQ
thorsten
5.4
0%
Oct 17phpMyFAQ 4.2.0-alpha before 4.2.0-beta Stored XSS via SVG Upload Sanitizer Bypass
CVE-2026-111895
PH
phpMyFAQ
thorsten
6.8
0%
Oct 17phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta Account Takeover via Entra ID preferred_username
CVE-2026-111894
PH
phpMyFAQ
thorsten
5.4
0%
Oct 17phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Stored XSS via iframe data: URI
CVE-2026-111893
PH
phpMyFAQ
thorsten
6.5
0%
Oct 17phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API
CVE-2026-111892
PH
phpMyFAQ
thorsten
6.5
0%
Oct 17phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Rate Limiting on Password-Reset Endpoints
CVE-2026-111891
PH
phpMyFAQ
thorsten
5.5
0%
Oct 17phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API
CVE-2026-111890
PH
phpMyFAQ
thorsten
5.5
0%
Oct 17phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRights
CVE-2026-111889
PH
phpMyFAQ
thorsten
4.3
0%
Oct 17phpMyFAQ 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Authorization via Admin Dashboard
CVE-2026-111888
PH
phpMyFAQ
thorsten
2.7
0%
Oct 17phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update API
CVE-2026-111887
PH
phpMyFAQ
thorsten
5.3
0%
Oct 17phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment Endpoint
CVE-2026-111886
PH
phpMyFAQ
thorsten
6.5
0%
Oct 17phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta 2FA Brute-Force via remove-twofactor Endpoint
CVE-2026-111885
PH
phpMyFAQ
thorsten
5.5
0%
Oct 17phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup API
CVE-2026-111884
PH
phpMyFAQ
thorsten
8.3
0%
Oct 17phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Current-Password Step-Up on E-mail Change Enables Account Takeover
CVE-2026-111882
PH
phpMyFAQ
thorsten
8.1
0%
Oct 17phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta TOTP 2FA Bypass via SSO Callbacks
CVE-2026-109573
PH
phpMyFAQ
thorsten
8.1
0%
Oct 12phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint
CVE-2026-108851
PH
phpMyFAQ
thorsten
3.3
0%
Oct 11phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool
CVE-2026-47132
PH
phpMyFAQ
thorsten
5.4
0%
Sep 24phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration
CVE-2026-56738
PH
phpMyFAQ
thorsten
8.5
0%
Sep 24phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion
CVE-2026-56737
PH
phpMyFAQ
thorsten
8.1
1%
Sep 24phpMyFAQ's two-factor authentication login bypasses the password factor
CVE-2026-56736
PH
phpMyFAQ
thorsten
8.2
0%
Sep 24phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission
CVE-2026-85593
PH
phpMyFAQ
thorsten
5.4
0%
Sep 4phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode
CVE-2026-85592
PH
phpMyFAQ
thorsten
3.7
0%
Sep 4phpMyFAQ before 4.1.8 Authorization Bypass via question/create
CVE-2026-85591
PH
phpMyFAQ
thorsten
7.1
1%
Sep 4phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change
CVE-2026-85590
PH
phpMyFAQ
thorsten
7.1
1%
Sep 4phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disable
CVE-2026-85589
PH
phpMyFAQ
thorsten
5.3
0%
Sep 4phpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard API
CVE-2026-85588
PH
phpMyFAQ
thorsten
5.3
1%
Sep 4phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export
CVE-2026-85587
PH
phpMyFAQ
thorsten
5.3
0%
Sep 4phpMyFAQ before 4.1.8 Incorrect Authorization via Admin Pages
CVE-2026-85586
PH
phpMyFAQ
thorsten
6.9
0%
Sep 4phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter
CVE-2026-76215
PH
phpMyFAQ
thorsten
5.3
0%
Aug 19phpMyFAQ before 4.1.7 Missing Authorization via child resources
CVE-2026-76214
PH
phpMyFAQ
thorsten
7.4
0%
Aug 19phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
CVE-2026-76213
PH
phpMyFAQ
thorsten
7.4
0%
Aug 19phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle
CVE-2026-76212
PH
phpMyFAQ
thorsten
5.3
0%
Aug 19phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL
CVE-2026-76211
PH
phpMyFAQ
thorsten
4.3
0%
Aug 19phpMyFAQ before 4.1.7 Information Disclosure via Admin API
CVE-2026-76210
PH
phpMyFAQ
thorsten
6.5
0%
Aug 19phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
CVE-2026-76209
PH
phpMyFAQ
thorsten
4.3
0%
Aug 19phpMyFAQ before v4.1.6 Registration Bypass via API
CVE-2026-76208
PH
phpMyFAQ
thorsten
8.2
0%
Aug 19phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP
CVE-2026-76207
PH
phpMyFAQ
thorsten
8.1
0%
Aug 19phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie
CVE-2026-76206
PH
phpMyFAQ
thorsten
5.3
0%
Aug 19phpMyFAQ before 4.1.7 Information Disclosure via PDF Export
CVE-2026-76205
PH
phpMyFAQ
thorsten
8.1
0%
Aug 19phpMyFAQ before 4.1.7 SQL Injection via Glossary
CVE-2026-75920
PH
phpMyFAQ
thorsten
5.3
0%
Aug 19phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP
CVE-2026-75919
PH
phpMyFAQ
thorsten
5.3
1%
Aug 19phpMyFAQ before 4.1.7 Authentication Bypass via Setup API
CVE-2026-75918
PH
phpMyFAQ
thorsten
8.8
0%
Aug 19phpMyFAQ before 4.1.7 Authentication Bypass via Tracking File
CVE-2026-66399
PH
phpMyFAQ
thorsten
6.5
0%
Jul 27phpMyFAQ before 4.1.6 Privilege Escalation via Group Membership
CVE-2026-66398
PH
phpMyFAQ
thorsten
9.4
0%
Jul 27phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API