Ultimate Faq
Rustaurius · 2 CVEs
CVE-2026-94391
MEDIUM
WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability
Sep 23, 2026
CVE-2025-67590
MEDIUM
WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability
Dec 9, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-94391 | WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.17% | Sep 23, 2026 |
| CVE-2025-67590 | WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.12% | Dec 9, 2025 |
Showing 1 to 2 of 2 CVEs