thorsten vulnerabilities

CVEs per yearBy the year they were published

1. 20227
2. 202362
3. 202413
4. 20255
5. 202689

Newest CVEs

• CVE-2026-116183

  phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID

  thorsten · phpMyFAQ

  High8.7
• CVE-2026-116182

  phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching

  thorsten · phpMyFAQ

  Medium5.3
• CVE-2026-111911

  phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection

  thorsten · phpMyFAQ

  Critical9.3
• CVE-2026-111910

  phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Authorization Bypass via attachment.php Downloads

  thorsten · phpMyFAQ

  High7.1
• CVE-2026-111909

  phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API

  thorsten · phpMyFAQ

  High7.2
• CVE-2026-111908

  phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST API

  thorsten · phpMyFAQ

  High8.7
• CVE-2026-111907

  phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update-database

  thorsten · phpMyFAQ

  High7.1
• CVE-2026-111906

  phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations

  thorsten · phpMyFAQ

  High7.1
• CVE-2026-111905

  phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta IDOR Leaks TOTP Secret via /admin/api/user/data

  thorsten · phpMyFAQ

  High7.0
• CVE-2026-111904

  phpMyFAQ 4.2.0-alpha before 4.2.0-beta Information Disclosure via open-questions API

  thorsten · phpMyFAQ

  Medium6.9