P
Vendor security profile
phpMyFAQ
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs20
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
20toplam CVE
Uncertain20 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
20Unknown
Latest vulnerabilities
6.9
CVE-2026-76215phpMyFAQ before 4.1.7 Missing Authorization via child resources
Patch status unknownEPSS %0
9.1
CVE-2026-76214phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
Patch status unknownEPSS %0
9.1
CVE-2026-76213phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle
Patch status unknownEPSS %0
6.9
CVE-2026-76212phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL
Patch status unknownEPSS %0
5.3
CVE-2026-76211phpMyFAQ before 4.1.7 Information Disclosure via Admin API
Patch status unknownEPSS %0
7.1
CVE-2026-76210phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
Patch status unknownEPSS %0
5.3
CVE-2026-76209phpMyFAQ before v4.1.6 Registration Bypass via API
Patch status unknownEPSS %0
8.8
CVE-2026-76208phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP
Patch status unknownEPSS %0
8.6
CVE-2026-76207phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie
Patch status unknownEPSS %0
6.9
CVE-2026-76206phpMyFAQ before 4.1.7 Information Disclosure via PDF Export
Patch status unknownEPSS %0