Phpmyfaq

Products

ProductCVEsExploitedLatest
phpMyFAQ6–Jul 15, 2026

Exploited and recent CVEs

  • CVE-2026-57996 High 8.8 phpMyFAQ - Privilege Escalation via Missing SuperAdmin Guard in user/add Endpoint 0.4%
  • CVE-2026-57994 Medium 5.3 phpMyFAQ - Information Disclosure of Inactive FAQ Content via Public API Endpoints 0.4%
  • CVE-2026-57961 Low 2.7 phpMyFAQ - Authenticated Path Traversal in PDF Export via concatenatePaths Function 0.4%
  • CVE-2026-57995 High 8.8 phpMyFAQ - Privilege Escalation via Missing Self-Rights Constraint in GroupController::updatePermissions 0.4%
  • CVE-2026-56396 High 8.8 phpMyFAQ - Privilege Escalation via Missing Authorization in editUser() and updateUserRights() 0.4%
  • CVE-2023-53929 High 8.8 phpMyFAQ 3.1.12 CSV Injection via User Profile Export 0.5%