cleantalk
Vulnerabilities and Security Researches

Faust.js, CVE-2026-49062

CVE, Research URL

CVE-2026-49062

Home page URL

Security reports for Faust.js

Application

Faust.js

Published on
Jun 15, 2026
Research Description
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7.
Affected versions
max 1.8.8.
Status
vulnerable
Previous vulnerability researches
Customizable WordPress Gallery Plugin – Modula Image Gallery (CVE-2026-39481) , May 02, 2026
Customizable WordPress Gallery Plugin – Modula Image Gallery (CVE-2020-9003) , Jun 07, 2024
Customizable WordPress Gallery Plugin – Modula Image Gallery (CVE-2024-9416) , Apr 04, 2025
Customizable WordPress Gallery Plugin – Modula Image Gallery (CVE-2022-41135) , Jun 07, 2024
Customizable WordPress Gallery Plugin – Modula Image Gallery (CVE-2024-12853) , Jan 08, 2025
New vulnerability
SEO Plugin by Squirrly SEO (CVE-2026-52714) , Jun 18, 2026
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin (CVE-2026-8607) , Jun 18, 2026
Faust.js (CVE-2026-49062) , Jun 18, 2026
Conekta Payment Gateway (CVE-2026-49066) , Jun 18, 2026
Knit Pay – Instamojo, Razorpay, Cashfree, Stripe, Easebuzz, UPI QR, CCAvenue, GoUrl (CVE-2026-49070) , Jun 18, 2026