thorsten has 46 CVEs on record. Disclosure cadence is accelerating: 43 in the last 90 days against 3 in the 90 before. The busiest recent month was October 2026 with 32. The median CVSS is 6.5 (medium), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-862 (6) and CWE-287 (5). Most affected products: phpMyFAQ (40), thorsten/phpmyfaq (6).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 6.5
Publish → KEV: —
Last 90 days: 43 prev 3

Weakness classes

Products

phpMyFAQ 40
thorsten/phpmyfaq 6

Follow thorsten:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

thorsten vulnerabilities

CVEs affecting thorsten, newest first. Open any entry for full detail, references, and exploit status.

46 CVEsRSS

CVE-2026-109573High· 8.1PoC

2w ago

phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NO_BACKSLASH_ESCAPES mode

phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NO_BACKSLASH_ESCAPES mode. Unauthenticated attacke…

▾ Midnightthorsten · phpMyFAQEPSS 0.34%via NVD

CVE-2026-108851Low· 3.3PoC

2w ago

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that allows MCP clients to read restricted FAQs because Search::searchDatabase() never applies user or group permission checks

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that allows MCP clients to read restricted FAQs because Search::searchDatabase() never applies user or group permission checks. Atta…

▾ Twilightthorsten · phpMyFAQEPSS 0.15%via NVD

CVE-2026-56738High· 8.5

1mo ago

phpMyFAQ is an open source FAQ web application

phpMyFAQ is an open source FAQ web application. The `StopWords::add()` method inversions prior to 4.1.6 builds a SQL `INSERT` statement using `sprintf()` and inserts the user-supplied stop word value directly into the query string withou…

▾ Twilightthorsten · phpMyFAQEPSS 0.26%via NVD

CVE-2026-56737High· 8.1PoC

1mo ago

phpMyFAQ is an open source FAQ web application

phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authentication verification flow: an unauthenticated attacker can submit an account’s numeric user ID …

▾ Midnightthorsten · phpMyFAQEPSS 0.53%via NVD

CVE-2026-56736High· 8.2PoC

1mo ago

phpMyFAQ is an open source FAQ web application

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting (XSS) vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user (or low-privileged registered user) to inject arbitrary JavaScript that ex…

▾ Midnightthorsten · phpMyFAQEPSS 0.24%via NVD

CVE-2026-47132Medium· 5.4PoC

1mo ago

phpMyFAQ is an open source FAQ web application

phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injection vulnerability in phpMyFAQ’s chat user search allows any logged-in user to bypass the intended display-name search …

▾ Twilightthorsten · thorsten/phpmyfaqEPSS 0.25%via NVD

CVE-2026-85593Medium· 5.4

1mo ago

phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks() that calls html_entity_decode() on sanitized FAQ content, reversing entity-encoding protection

phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks() that calls html_entity_decode() on sanitized FAQ content, reversing entity-encoding protection. Authenticated user…

▾ Sunlitthorsten · phpMyFAQEPSS 0.24%via NVD

CVE-2026-85591High· 7.1

1mo ago

phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords without verifying the current password

phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords without verifying the current password. Attackers with s…

▾ Twilightthorsten · phpMyFAQEPSS 0.52%via NVD

CVE-2026-85588Medium· 5.3

1mo ago

phpMyFAQ versions before 4.1.8 include live TOTP shared secrets in plaintext within user data export ZIP files

phpMyFAQ versions before 4.1.8 include live TOTP shared secrets in plaintext within user data export ZIP files. Attackers obtaining exported archives can extract the TOTP seed and generate valid one-time codes to bypass two-factor authen…

▾ Sunlitthorsten · phpMyFAQEPSS 0.53%via NVD

CVE-2026-85586Medium· 6.9

1mo ago

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing da…

▾ Sunlitthorsten · phpMyFAQEPSS 0.49%via NVD

CVE-2026-85589Medium· 5.3PoC

1mo ago

phpMyFAQ before 4.2.0-alpha.2 contains a missing authorization vulnerability in the admin dashboard API endpoints searches and content-health that enforce only authentication without permission checks

phpMyFAQ before 4.2.0-alpha.2 contains a missing authorization vulnerability in the admin dashboard API endpoints searches and content-health that enforce only authentication without permission checks. Any authenticated user can access t…

▾ Twilightthorsten · phpMyFAQEPSS 0.49%via NVD

GHSA-88g4-74f3-63x9Medium· 4.9

2mo ago