Known vulnerabilities in phpMyFAQ 2.8.14 - page 2

Software: phpMyFAQ
Version: 2.8.14
Software CPE: cpe:2.3:a:thorsten_rinne:phpmyfaq:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting phpMyFAQ version 2.8.14 phpMyFAQ 2.8.14 is affected by 53 vulnerabilities: 6 high, 20 medium, 27 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137462 - Missing Authorization
CVE-2026-57996
CWE-862 Medium
No
No
4.1.5 14.07.2026 SB2026071454
#VU137461 - Improper Privilege Management
CVE-2026-57995
CWE-269 Medium
No
No
4.1.5 14.07.2026 SB2026071454
#VU137458 - Use of Weak Hash
CVE-2026-48488
CWE-328 Medium
No
No
4.1.4 14.07.2026 SB2026071453
#VU137457 - Missing Authorization
CVE-2026-56396
CWE-862 Medium
No
No
4.1.4 14.07.2026 SB2026071453
#VU137456 - Missing Authorization
CVE-2026-49205
CWE-862 Low
No
No
4.1.4 14.07.2026 SB2026071453
#VU131755 - Weak password recovery mechanism
CVE-2026-35676
CWE-640 High
No
No
4.1.3 18.05.2026 SB2026051896
#VU131756 - Weak password recovery mechanism
CWE-640 High
No
No
4.1.3 18.05.2026 SB2026051896
#VU131754 - Weak password recovery mechanism
CVE-2026-35675
CWE-640 High
No
No
4.1.3 18.05.2026 SB2026051896
#VU131752 - Insecure Default Initialization of Resource
CVE-2026-35672
CWE-1188 Medium
No
No
4.1.3 18.05.2026 SB2026051896
#VU130124 - Incorrect Authorization
CVE-2026-46362
CWE-863 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130123 - Missing Authorization
CVE-2026-46365
CWE-862 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-46363
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130121 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-46360
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130120 - Missing Authorization
CVE-2026-45007
CWE-862 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-46361
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130117 - Improper Restriction of Excessive Authentication Attempts
CVE-2026-45010
CWE-307 High
No
No
4.1.2 05.05.2026 SB20260505101
#VU130116 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-46359
CWE-89 Medium
No
No
4.1.2 05.05.2026 SB20260505101
#VU130115 - Incorrect Authorization
CVE-2026-46366
CWE-863 Medium
No
No
4.1.2 05.05.2026 SB20260505101
#VU130114 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45008
CWE-22 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130113 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-46364
CWE-89 High
No
No
4.1.2 05.05.2026 SB20260505101


Showing elements 21 - 40 out of 53