List of Security Advisories
We take any security issues found in phpMyFAQ or bundled components seriously. Below are all published security advisories, grouped by year and ordered from newest to oldest.
2026
5 advisoriesSecurity Advisory 2026-05-14
Multiple vulnerabilities in phpMyFAQ
Security Advisory 2026-04-28
Multiple vulnerabilities in phpMyFAQ
Security Advisory 2026-03-31
Multiple vulnerabilities in phpMyFAQ
Security Advisory 2026-02-27
Unauthenticated account creation via WebAuthn prepare endpoint vulnerability in phpMyFAQ
Security Advisory 2026-01-23
Multiple vulnerabilities in phpMyFAQ
2025
4 advisoriesSecurity Advisory 2025-12-29
Stored cross-site scripting (XSS) and unauthenticated config backup download vulnerability in phpMyFAQ
Security Advisory 2025-11-15
Authenticated SQL Injection in Configuration Update Functionality in phpMyFAQ
Security Advisory 2025-10-03
Duplicate email registration allows multiple accounts with the same email in phpMyFAQ
Security Advisory 2025-01-02
Stored HTML Injection vulnerability in phpMyFAQ
2024
5 advisoriesSecurity Advisory 2024-12-13
User Interface (UI) Misrepresentation of Critical Information vulnerability in phpMyFAQ
Security Advisory 2024-12-06
Information disclosure vulnerability in phpMyFAQ
Security Advisory 2024-07-21
Authentication Bypass in phpMyFAQ
Security Advisory 2024-03-25
XSS, SQL injections and bypass vulnerabilities in phpMyFAQ
Security Advisory 2024-02-05
XSS, phishing and spoofing vulnerabilities in phpMyFAQ
2023
9 advisoriesSecurity Advisory 2023-10-27
XSS vulnerabilities in phpMyFAQ
Security Advisory 2023-09-21
XSS vulnerabilities in phpMyFAQ
Security Advisory 2023-08-27
XSS vulnerabilities in phpMyFAQ
Security Advisory 2023-07-16
XSS and CSV injection vulnerabilities in phpMyFAQ
Security Advisory 2023-05-17
XSS vulnerabilities in phpMyFAQ
Security Advisory 2023-04-23
Multiple vulnerabilities in phpMyFAQ
Security Advisory 2023-03-20
Multiple vulnerabilities in phpMyFAQ
Security Advisory 2023-02-12
Multiple vulnerabilities in phpMyFAQ
Security Advisory 2023-01-15
Multiple vulnerabilities in phpMyFAQ
2022
5 advisoriesSecurity Advisory 2022-12-11
Multiple vulnerabilities in phpMyFAQ
Security Advisory 2022-10-24
Multiple vulnerabilities in phpMyFAQ
Security Advisory 2022-10-02
Multiple CSRF and XSS vulnerabilities in phpMyFAQ
Security Advisory 2022-07-23
Stored XSS vulnerability in phpMyFAQ
Security Advisory 2022-01-17
Multiple CSRF and XSS vulnerabilities in phpMyFAQ
2021
1 advisory2020
1 advisory2018
1 advisory2017
4 advisoriesSecurity Advisory 2017-10-19
XSS, CSRF and SQL injection in phpMyFAQ
Security Advisory 2017-07-12
Improper Restriction in phpMyFAQ
Security Advisory 2017-04-02
Stored XSS in phpMyFAQ
Security Advisory 2017-01-27
Execution of arbitrary PHP code in phpMyFAQ version 2.9
2016
2 advisories2014
3 advisories2013
2 advisories2012
1 advisory2011
2 advisories2010
2 advisories2009
3 advisories2008
1 advisory2007
1 advisory2006
2 advisories2005
5 advisoriesSecurity Advisory 2005-11-18
Multiple Cross Site Scripting vulnerabilities in phpMyFAQ 1.5.x
Security Advisory 2005-09-23
SQL injection, takeover, path disclosure, remote code execution in phpMyFAQ 1.5.x
Security Advisory 2005-08-15
Remote PHP Code Injection Vulnerability in phpMyFAQ 1.4.x and 1.5.x
Security Advisory 2005-03-06
Execution of arbitrary PHP code in phpMyFAQ version 1.4 and 1.5
Security Advisory 2005-03-06
SQL injection vulnerability in phpMyFAQ version 1.4 and 1.5