Known vulnerabilities in phpMyFAQ 2.5.2

Software: phpMyFAQ
Version: 2.5.2
Software CPE: cpe:2.3:a:thorsten_rinne:phpmyfaq:*:*:*:*:*:*:*:*
Total vulnerabilities: 46
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting phpMyFAQ version 2.5.2 phpMyFAQ 2.5.2 is affected by 46 vulnerabilities: 6 high, 19 medium, 21 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140896 - Authentication Bypass by Capture-replay
CWE-294 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140894 - Improper Restriction of Excessive Authentication Attempts
CWE-307 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140891 - Argument Injection or Modification
CWE-88 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140889 - Missing Authorization
CWE-862 Low
No
No
4.1.7 04.08.2026 SB2026080470
#VU140888 - Information Exposure Through an Error Message
CWE-209 Low
No
No
4.1.7 04.08.2026 SB2026080470
#VU140887 - Missing Authorization
CWE-862 Low
No
No
4.1.7 04.08.2026 SB2026080470
#VU140885 - Missing Critical Step in Authentication
CWE-304 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140884 - Incorrect Authorization
CWE-863 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140883 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140882 - Files or Directories Accessible to External Parties
CWE-552 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140880 - Missing Authentication for Critical Function
CWE-306 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140881 - Missing Authentication for Critical Function
CWE-306 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140879 - Information Exposure Through Log Files
CWE-532 High
No
No
4.1.7 04.08.2026 SB2026080470
#VU137462 - Missing Authorization
CWE-862 Medium
No
No
4.1.5 14.07.2026 SB2026071454
#VU137461 - Improper Privilege Management
CVE-2026-57995
CWE-269 Medium
No
No
4.1.5 14.07.2026 SB2026071454
#VU137458 - Use of Weak Hash
CVE-2026-48488
CWE-328 Medium
No
No
4.1.4 14.07.2026 SB2026071453
#VU137457 - Missing Authorization
CVE-2026-56396
CWE-862 Medium
No
No
4.1.4 14.07.2026 SB2026071453
#VU137456 - Missing Authorization
CVE-2026-49205
CWE-862 Low
No
No
4.1.4 14.07.2026 SB2026071453
#VU131755 - Weak password recovery mechanism
CWE-640 High
No
No
4.1.3 18.05.2026 SB2026051896
#VU131756 - Weak password recovery mechanism
CWE-640 High
No
No
4.1.3 18.05.2026 SB2026051896


Showing elements 1 - 20 out of 46