Known vulnerabilities in phpMyFAQ 2.5.2

Software: phpMyFAQ
Version: 2.5.2
Software CPE: cpe:2.3:a:thorsten_rinne:phpmyfaq:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting phpMyFAQ version 2.5.2 phpMyFAQ 2.5.2 is affected by 53 vulnerabilities: 6 high, 20 medium, 27 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144537 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-85593
CWE-79 Low
No
No
4.1.8 21.08.2026 SB2026082147
#VU144536 - Incorrect Authorization
CVE-2026-85592
CWE-863 Low
No
No
4.1.8 21.08.2026 SB2026082147
#VU144535 - Unverified Password Change
CVE-2026-85591
CWE-620 Low
No
No
4.1.8 21.08.2026 SB2026082147
#VU144534 - Use of Single-factor Authentication
CVE-2026-85590
CWE-308 Low
No
No
4.1.8 21.08.2026 SB2026082147
#VU144532 - Exposure of sensitive information to an unauthorized actor
CVE-2026-85588
CWE-200 Low
No
No
4.1.8 21.08.2026 SB2026082147
#VU144531 - Incorrect Authorization
CVE-2026-85587
CWE-863 Low
No
No
4.1.8 21.08.2026 SB2026082147
#VU144530 - Improper Control of Interaction Frequency
CVE-2026-85586
CWE-799 Medium
No
No
4.1.8 21.08.2026 SB2026082147
#VU140896 - Authentication Bypass by Capture-replay
CVE-2026-76214
CWE-294 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140894 - Improper Restriction of Excessive Authentication Attempts
CVE-2026-76213
CWE-307 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140891 - Argument Injection or Modification
CVE-2026-76212
CWE-88 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140889 - Missing Authorization
CVE-2026-76211
CWE-862 Low
No
No
4.1.7 04.08.2026 SB2026080470
#VU140888 - Information Exposure Through an Error Message
CVE-2026-76210
CWE-209 Low
No
No
4.1.7 04.08.2026 SB2026080470
#VU140887 - Missing Authorization
CVE-2026-76209
CWE-862 Low
No
No
4.1.7 04.08.2026 SB2026080470
#VU140885 - Missing Critical Step in Authentication
CVE-2026-76207
CWE-304 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140884 - Incorrect Authorization
CVE-2026-76206
CWE-863 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140883 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-76205
CWE-89 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140882 - Files or Directories Accessible to External Parties
CVE-2026-75920
CWE-552 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140880 - Missing Authentication for Critical Function
CVE-2026-75919
CWE-306 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140881 - Missing Authentication for Critical Function
CWE-306 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140879 - Information Exposure Through Log Files
CVE-2026-75918
CWE-532 High
No
No
4.1.7 04.08.2026 SB2026080470


Showing elements 1 - 20 out of 53