{"schema_version":1,"title":"phpmyfaq/phpmyfaq (Packagist) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 75 vulnerabilities in phpmyfaq/phpmyfaq (Packagist): 3 in the last 7 days and 9 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-56738, was published on 24 September 2026.","url":"https://junglewise.ai/threats/technologies/phpmyfaq-phpmyfaq","json_url":"https://junglewise.ai/threats/technologies/phpmyfaq-phpmyfaq.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/phpmyfaq-phpmyfaq","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":20,"all_time":75,"critical":4,"exploited":0,"last_7_days":3,"last_30_days":3,"last_90_days":9,"last_365_days":62},"latest":[{"cve":"CVE-2026-56738","cvss":4,"epss":0.0026,"slug":"cve-2026-56738-phpmyfaq-sql-injection-in-stopwords-add","title":"phpMyFAQ is an open source FAQ web application. The `StopWords::add()` method inversions prior to 4.1.6 builds a SQL `INSERT` statement usin","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:04.89+00:00","url":"https://junglewise.ai/threats/cve-2026-56738-phpmyfaq-sql-injection-in-stopwords-add"},{"cve":"CVE-2026-56737","cvss":8.1,"epss":0.004,"slug":"cve-2026-56737-phpmyfaq-two-factor-authentication-password-bypass","title":"phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authe","severity":"high","exploited":false,"published_at":"2026-09-24T16:17:07.637+00:00","url":"https://junglewise.ai/threats/cve-2026-56737-phpmyfaq-two-factor-authentication-password-bypass"},{"cve":"CVE-2026-56736","cvss":8.2,"epss":0.0024,"slug":"cve-2026-56736-phpmyfaq-stored-xss-in-admin-faq-editor-via-html-entity-bypass","title":"phpMyFAQ is an open source FAQ web application. A stored cross-site scripting (XSS) vulnerability in versions prior to 4.2.0-alpha allows an","severity":"high","exploited":false,"published_at":"2026-09-24T15:17:24.1+00:00","url":"https://junglewise.ai/threats/cve-2026-56736-phpmyfaq-stored-xss-in-admin-faq-editor-via-html-entity-bypass"},{"cvss":8.8,"slug":"phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe","title":"phpMyFAQ privilege escalation in GroupController::updatePermissions","severity":"high","exploited":false,"published_at":"2026-08-25T17:32:07+00:00","url":"https://junglewise.ai/threats/phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe"},{"cvss":5.3,"slug":"phpmyfaq-public-api-information-disclosure-in-faq-endpoints-8f0c6c40","title":"phpMyFAQ public API information disclosure in FAQ endpoints","severity":"medium","exploited":false,"published_at":"2026-08-25T17:30:23+00:00","url":"https://junglewise.ai/threats/phpmyfaq-public-api-information-disclosure-in-faq-endpoints-8f0c6c40"},{"cvss":4.9,"slug":"phpmyfaq-path-traversal-in-pdf-export-5f62d0df","title":"phpMyFAQ path traversal in PDF export","severity":"medium","exploited":false,"published_at":"2026-08-25T17:28:56+00:00","url":"https://junglewise.ai/threats/phpmyfaq-path-traversal-in-pdf-export-5f62d0df"},{"cve":"CVE-2026-57994","cvss":5.3,"epss":0.0036,"slug":"cve-2026-57994-phpmyfaq-information-disclosure-of-inactive-faq-content-in-public","title":"phpMyFAQ information disclosure of inactive FAQ content in public API","severity":"medium","exploited":false,"published_at":"2026-07-10T15:16:47.85+00:00","url":"https://junglewise.ai/threats/cve-2026-57994-phpmyfaq-information-disclosure-of-inactive-faq-content-in-public"},{"cve":"CVE-2026-57961","cvss":3.1,"epss":0.004,"slug":"cve-2026-57961-phpmyfaq-path-traversal-in-pdf-export-concatenatepaths-function","title":"phpMyFAQ path traversal in PDF export concatenatePaths function","severity":"low","exploited":false,"published_at":"2026-07-10T15:16:47.057+00:00","url":"https://junglewise.ai/threats/cve-2026-57961-phpmyfaq-path-traversal-in-pdf-export-concatenatepaths-function"},{"cve":"CVE-2026-57995","cvss":8.8,"epss":0.0044,"slug":"cve-2026-57995-phpmyfaq-privilege-escalation-in-groupcontroller","title":"phpMyFAQ privilege escalation in GroupController updatePermissions","severity":"high","exploited":false,"published_at":"2026-06-30T23:17:32.537+00:00","url":"https://junglewise.ai/threats/cve-2026-57995-phpmyfaq-privilege-escalation-in-groupcontroller"},{"cvss":8.1,"slug":"phpmyfaq-privilege-escalation-via-incomplete-fix-in-usercontroller-api-93ecfd60","title":"phpMyFAQ privilege escalation via incomplete fix in UserController API","severity":"high","exploited":false,"published_at":"2026-06-26T21:23:37+00:00","url":"https://junglewise.ai/threats/phpmyfaq-privilege-escalation-via-incomplete-fix-in-usercontroller-api-93ecfd60"},{"cve":"CVE-2026-56396","cvss":8.8,"epss":0.0044,"slug":"cve-2026-56396-phpmyfaq-privilege-escalation-in-edituser-and-updateuserrights","title":"phpMyFAQ privilege escalation in editUser and updateUserRights","severity":"high","exploited":false,"published_at":"2026-06-21T14:16:26.66+00:00","url":"https://junglewise.ai/threats/cve-2026-56396-phpmyfaq-privilege-escalation-in-edituser-and-updateuserrights"},{"cve":"CVE-2026-49205","cvss":6.5,"epss":0.0039,"slug":"cve-2026-49205-phpmyfaq-missing-authorization-in-api-write-endpoints","title":"phpMyFAQ missing authorization in API write endpoints","severity":"medium","exploited":false,"published_at":"2026-06-18T22:16:31.937+00:00","url":"https://junglewise.ai/threats/cve-2026-49205-phpmyfaq-missing-authorization-in-api-write-endpoints"},{"cve":"CVE-2026-48488","cvss":4,"epss":0.0028,"slug":"cve-2026-48488-phpmyfaq-weak-cryptographic-hash-for-attachment-passwords","title":"phpMyFAQ weak cryptographic hash for attachment passwords","severity":"medium","exploited":false,"published_at":"2026-06-08T16:16:43.227+00:00","url":"https://junglewise.ai/threats/cve-2026-48488-phpmyfaq-weak-cryptographic-hash-for-attachment-passwords"},{"cve":"CVE-2026-35676","cvss":8.2,"epss":0.0033,"slug":"cve-2026-35676-phpmyfaq-unauthenticated-password-reset-in-user-password-update","title":"phpMyFAQ unauthenticated password reset in user password update API","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.923+00:00","url":"https://junglewise.ai/threats/cve-2026-35676-phpmyfaq-unauthenticated-password-reset-in-user-password-update"},{"cve":"CVE-2026-35675","cvss":8.2,"epss":0.0046,"slug":"cve-2026-35675-phpmyfaq-authentication-bypass-in-password-reset-api","title":"phpMyFAQ authentication bypass in password reset API","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.8+00:00","url":"https://junglewise.ai/threats/cve-2026-35675-phpmyfaq-authentication-bypass-in-password-reset-api"},{"cve":"CVE-2026-35672","cvss":7.5,"epss":0.0056,"slug":"cve-2026-35672-phpmyfaq-authentication-bypass-in-rest-api-v4-0","title":"phpMyFAQ authentication bypass in REST API v4.0","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.667+00:00","url":"https://junglewise.ai/threats/cve-2026-35672-phpmyfaq-authentication-bypass-in-rest-api-v4-0"},{"cve":"CVE-2026-35671","cvss":8.8,"epss":0.0044,"slug":"cve-2026-35671-phpmyfaq-idor-in-admin-api-user-password-endpoint","title":"phpMyFAQ IDOR in admin API user password endpoint","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.53+00:00","url":"https://junglewise.ai/threats/cve-2026-35671-phpmyfaq-idor-in-admin-api-user-password-endpoint"},{"cvss":8.2,"slug":"phpmyfaq-account-takeover-via-weak-password-recovery-mechanism-b9c11aaa","title":"phpMyFAQ account takeover via weak password recovery mechanism","severity":"high","exploited":false,"published_at":"2026-05-20T15:46:55+00:00","url":"https://junglewise.ai/threats/phpmyfaq-account-takeover-via-weak-password-recovery-mechanism-b9c11aaa"},{"cvss":7.5,"slug":"phpmyfaq-auth-bypass-via-default-empty-api-token-430bee97","title":"phpMyFAQ auth bypass via default empty API token","severity":"high","exploited":false,"published_at":"2026-05-20T15:46:42+00:00","url":"https://junglewise.ai/threats/phpmyfaq-auth-bypass-via-default-empty-api-token-430bee97"},{"cvss":8.8,"slug":"phpmyfaq-idor-privilege-escalation-in-admin-api-password-reset-a3677089","title":"phpMyFAQ IDOR privilege escalation in Admin API password reset","severity":"high","exploited":false,"published_at":"2026-05-20T15:46:17+00:00","url":"https://junglewise.ai/threats/phpmyfaq-idor-privilege-escalation-in-admin-api-password-reset-a3677089"},{"cvss":8.2,"slug":"phpmyfaq-weak-password-recovery-in-unauthorizedusercontroller-fb01efd0","title":"phpMyFAQ weak password recovery in UnauthorizedUserController","severity":"high","exploited":false,"published_at":"2026-05-20T15:45:53+00:00","url":"https://junglewise.ai/threats/phpmyfaq-weak-password-recovery-in-unauthorizedusercontroller-fb01efd0"},{"cvss":3.1,"slug":"duplicate-advisory-phpmyfaq-svg-sanitizer-entity-decoding-depth-limit-5ae84b64","title":"Duplicate Advisory: phpMyFAQ: SVG Sanitizer Entity Decoding Depth Limit Bypass Leading to Stored XSS","severity":"low","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-phpmyfaq-svg-sanitizer-entity-decoding-depth-limit-5ae84b64"},{"cvss":3.1,"slug":"duplicate-advisory-phpmyfaq-stored-xss-in-faq-question-answer-via-34f930d5","title":"Duplicate Advisory: phpMyFAQ: Stored XSS in FAQ Question/Answer via Encode-Decode Bypass of removeAttributes() Sanitization","severity":"low","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-phpmyfaq-stored-xss-in-faq-question-answer-via-34f930d5"},{"cvss":3.1,"slug":"duplicate-advisory-phpmyfaq-s-missing-configuration-edit-permission-5824de4c","title":"Duplicate Advisory: phpMyFAQ's Missing CONFIGURATION_EDIT Permission Check on 12 Admin API Configuration Tab Endpoints Allows Information Di","severity":"low","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-phpmyfaq-s-missing-configuration-edit-permission-5824de4c"},{"cvss":9.8,"slug":"phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header-23e44a8e","title":"phpMyFAQ SQL injection in BuiltinCaptcha via User-Agent header","severity":"critical","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header-23e44a8e"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":3}],"related":[{"name":"wwbn/avideo (Packagist)","slug":"wwbn-avideo","vulnerabilities":169,"url":"https://junglewise.ai/threats/technologies/wwbn-avideo"},{"name":"getgrav/grav (Packagist)","slug":"getgrav-grav","vulnerabilities":144,"url":"https://junglewise.ai/threats/technologies/getgrav-grav"},{"name":"thorsten/phpmyfaq (Packagist)","slug":"thorsten-phpmyfaq","vulnerabilities":138,"url":"https://junglewise.ai/threats/technologies/thorsten-phpmyfaq"},{"name":"pimcore/pimcore (Packagist)","slug":"pimcore-pimcore","vulnerabilities":136,"url":"https://junglewise.ai/threats/technologies/pimcore-pimcore"},{"name":"dolibarr/dolibarr (Packagist)","slug":"dolibarr-dolibarr","vulnerabilities":125,"url":"https://junglewise.ai/threats/technologies/dolibarr-dolibarr"},{"name":"drupal/core (Packagist)","slug":"packagist-drupal-core","vulnerabilities":116,"url":"https://junglewise.ai/threats/technologies/packagist-drupal-core"},{"name":"librenms/librenms (Packagist)","slug":"librenms-librenms","vulnerabilities":113,"url":"https://junglewise.ai/threats/technologies/librenms-librenms"},{"name":"microweber/microweber (Packagist)","slug":"microweber-microweber","vulnerabilities":106,"url":"https://junglewise.ai/threats/technologies/microweber-microweber"},{"name":"concrete5/concrete5 (Packagist)","slug":"concrete5-concrete5","vulnerabilities":93,"url":"https://junglewise.ai/threats/technologies/concrete5-concrete5"},{"name":"craftcms/cms (Packagist)","slug":"craftcms-cms","vulnerabilities":90,"url":"https://junglewise.ai/threats/technologies/craftcms-cms"},{"name":"snipe/snipe-it (Packagist)","slug":"snipe-snipe-it","vulnerabilities":80,"url":"https://junglewise.ai/threats/technologies/snipe-snipe-it"},{"name":"moodle/moodle (Packagist)","slug":"moodle-moodle","vulnerabilities":71,"url":"https://junglewise.ai/threats/technologies/moodle-moodle"}],"technology":{"hub":true,"name":"phpmyfaq/phpmyfaq (Packagist)","slug":"phpmyfaq-phpmyfaq","vendor":{"name":"Packagist","slug":"packagist","url":"https://junglewise.ai/threats/vendors/packagist"},"aliases":[],"homepage":"https://www.phpmyfaq.de/","repo_url":"https://github.com/thorsten/phpmyfaq","description":"An open-source multilingual FAQ software package written in PHP.","url":"https://junglewise.ai/threats/technologies/phpmyfaq-phpmyfaq"},"most_severe":[{"cve":"CVE-2026-46364","cvss":9.8,"epss":0.0212,"slug":"cve-2026-46364-phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header","title":"phpMyFAQ SQL injection in BuiltinCaptcha via User-Agent header","severity":"critical","exploited":false,"published_at":"2026-05-15T19:17:03.75+00:00","url":"https://junglewise.ai/threats/cve-2026-46364-phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header"},{"cvss":9.8,"slug":"phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header-23e44a8e","title":"phpMyFAQ SQL injection in BuiltinCaptcha via User-Agent header","severity":"critical","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-sql-injection-in-builtincaptcha-via-user-agent-header-23e44a8e"},{"cve":"CVE-2026-45010","cvss":9.1,"epss":0.0057,"slug":"cve-2026-45010-thorsten-phpmyfaq-2fa-bypass-via-brute-force-in-admin-check","title":"thorsten phpMyFAQ 2FA bypass via brute-force in /admin/check","severity":"critical","exploited":false,"published_at":"2026-05-15T19:17:01.45+00:00","url":"https://junglewise.ai/threats/cve-2026-45010-thorsten-phpmyfaq-2fa-bypass-via-brute-force-in-admin-check"},{"cvss":9.1,"slug":"phpmyfaq-2fa-bypass-via-unauthenticated-brute-force-in-admin-check-7a3aa01c","title":"phpMyFAQ 2FA bypass via unauthenticated brute-force in admin check endpoint","severity":"critical","exploited":false,"published_at":"2026-05-15T21:31:32+00:00","url":"https://junglewise.ai/threats/phpmyfaq-2fa-bypass-via-unauthenticated-brute-force-in-admin-check-7a3aa01c"},{"cve":"CVE-2026-57995","cvss":8.8,"epss":0.0044,"slug":"cve-2026-57995-phpmyfaq-privilege-escalation-in-groupcontroller","title":"phpMyFAQ privilege escalation in GroupController updatePermissions","severity":"high","exploited":false,"published_at":"2026-06-30T23:17:32.537+00:00","url":"https://junglewise.ai/threats/cve-2026-57995-phpmyfaq-privilege-escalation-in-groupcontroller"},{"cve":"CVE-2026-56396","cvss":8.8,"epss":0.0044,"slug":"cve-2026-56396-phpmyfaq-privilege-escalation-in-edituser-and-updateuserrights","title":"phpMyFAQ privilege escalation in editUser and updateUserRights","severity":"high","exploited":false,"published_at":"2026-06-21T14:16:26.66+00:00","url":"https://junglewise.ai/threats/cve-2026-56396-phpmyfaq-privilege-escalation-in-edituser-and-updateuserrights"},{"cve":"CVE-2026-35671","cvss":8.8,"epss":0.0044,"slug":"cve-2026-35671-phpmyfaq-idor-in-admin-api-user-password-endpoint","title":"phpMyFAQ IDOR in admin API user password endpoint","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.53+00:00","url":"https://junglewise.ai/threats/cve-2026-35671-phpmyfaq-idor-in-admin-api-user-password-endpoint"},{"cvss":8.8,"slug":"phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe","title":"phpMyFAQ privilege escalation in GroupController::updatePermissions","severity":"high","exploited":false,"published_at":"2026-08-25T17:32:07+00:00","url":"https://junglewise.ai/threats/phpmyfaq-privilege-escalation-in-groupcontroller-updatepermissions-3da5d4fe"},{"cvss":8.8,"slug":"phpmyfaq-idor-privilege-escalation-in-admin-api-password-reset-a3677089","title":"phpMyFAQ IDOR privilege escalation in Admin API password reset","severity":"high","exploited":false,"published_at":"2026-05-20T15:46:17+00:00","url":"https://junglewise.ai/threats/phpmyfaq-idor-privilege-escalation-in-admin-api-password-reset-a3677089"},{"cve":"CVE-2026-35675","cvss":8.2,"epss":0.0046,"slug":"cve-2026-35675-phpmyfaq-authentication-bypass-in-password-reset-api","title":"phpMyFAQ authentication bypass in password reset API","severity":"high","exploited":false,"published_at":"2026-05-28T16:16:21.8+00:00","url":"https://junglewise.ai/threats/cve-2026-35675-phpmyfaq-authentication-bypass-in-password-reset-api"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}