PatchTheCVEphpmoadmin vulnerabilities
Recent CVEs affecting phpmoadmin products. 3 tracked.
phpmoadmin has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-02-20. Highest priority: CVE-2019-25451 (score 44/100).
- CVE-2019-25454 MEDIUM 6.1 DOWNGRADE phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to
- CVE-2019-25453 MEDIUM 6.1 DOWNGRADE phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers
- CVE-2019-25451 HIGH 8.8 DOWNGRADE phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthor
FAQ
How do I fix phpmoadmin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpmoadmin being exploited right now?
None of the tracked phpmoadmin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpmoadmin CVE should I patch first?
CVE-2019-25451 currently ranks highest (44/100): phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthor.