phpMyAdmin vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20252
3. 202610

Newest CVEs

• CVE-2026-121263

  phpMyAdmin MoTranslator Loader.php getTranslator path traversal

  phpMyAdmin · MoTranslator

  Medium5.3
• CVE-2026-121262

  phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion

  phpMyAdmin · SQL-Parser

  Medium6.9
• CVE-2026-121261

  phpMyAdmin ShapeFile SHP File loadFromFile infinite loop

  phpMyAdmin · ShapeFile

  Medium5.3
• CVE-2026-119563

  phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name

  phpMyAdmin · phpMyAdmin

  Medium5.1
• CVE-2026-119562

  phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute

  phpMyAdmin · phpMyAdmin

  Low2.3
• CVE-2026-119561

  phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer

  phpMyAdmin · phpMyAdmin

  High7.6
• CVE-2026-119429

  phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set

  phpMyAdmin · phpMyAdmin

  Medium5.3
• CVE-2026-119428

  phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled

  phpMyAdmin · phpMyAdmin

  Medium6.3
• CVE-2026-119427

  phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting

  phpMyAdmin · phpMyAdmin

  Low2.3
• CVE-2026-119426

  phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql

  phpMyAdmin · phpMyAdmin

  High7.7