Phpmyfaq

This hub aggregates every CVE we track for Phpmyfaq, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Phpmyfaq.

• CVE-2026-47132phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration5.4Sep 24, 2026
• CVE-2026-56738phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word InsertionSep 24, 2026
• CVE-2026-56737phpMyFAQ's two-factor authentication login bypasses the password factor8.1Sep 24, 2026
• CVE-2026-56736phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission8.2Sep 24, 2026
• CVE-2026-85593phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode5.4Sep 4, 2026
• CVE-2026-85592phpMyFAQ before 4.1.8 Authorization Bypass via question/create3.7Sep 4, 2026
• CVE-2026-85590phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor DisableSep 4, 2026
• CVE-2026-85591phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password ChangeSep 4, 2026
• CVE-2026-85589phpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard APISep 4, 2026
• CVE-2026-85588phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data ExportSep 4, 2026
• CVE-2026-85587phpMyFAQ before 4.1.8 Incorrect Authorization via Admin PagesSep 4, 2026
• CVE-2026-85586phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameterSep 4, 2026
• CVE-2026-76215phpMyFAQ before 4.1.7 Missing Authorization via child resources5.3Aug 19, 2026
• CVE-2026-76214phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge7.4Aug 19, 2026
• CVE-2026-76213phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle7.4Aug 19, 2026