Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: thorsten phpMyFAQ 4.1.6 Clear all filters
TI-2026-53314 CVE-2026-76209 · GHSA-fh25-jpw4-vg4p

phpMyFAQ before v4.1.6 Registration Bypass via API

Priority LOW 24

phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers to create user accounts when registration is disabled.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00289 Published 2026-08-19 Fixed in 4.1.6 CWE-862
TI-2026-53148 CVE-2026-75920 · GHSA-2mwq-hcmq-fqq4

phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP

Priority LOW 27

phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00358 Published 2026-08-19 Fixed in 4.1.6 CWE-377