T
Vendor security profile
thorsten
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs24
Critical2
CISA KEV0
Public exploit15
Patch rate%4
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
14
8
1
CVE KEV
CVE severity distribution
24toplam CVE
Critical2 (8%)
High10 (42%)
Medium12 (50%)
Patch and exploitation view
%4
Verified patch
%0
CISA KEV
%63
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
23Unknown
Latest vulnerabilities
4.8
CVE-2026-108851
phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool
T
Patch status unknown
5.4
CVE-2026-47132
phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration
T
Patch verifiedEPSS %0
8.5
CVE-2026-56738
phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion
T
Patch status unknownEPSS %0
8.1
CVE-2026-56737
phpMyFAQ's two-factor authentication login bypasses the password factor
T
Patch status unknownEPSS %0
8.2
CVE-2026-56736
phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission
T
Patch status unknownEPSS %0
5.1
CVE-2026-85593
phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode
T
Patch status unknownEPSS %0
7.1
CVE-2026-85591
phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change
T
Patch status unknownEPSS %1
5.3
CVE-2026-85588
phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export
T
Patch status unknownEPSS %1
6.9
CVE-2026-85586
phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter
T
Patch status unknownEPSS %0
6.9
CVE-2026-76215
phpMyFAQ before 4.1.7 Missing Authorization via child resources
T
Patch status unknownEPSS %0