Skip to content
OpenAdvisories

Product · Rustaurius

Ultimate FAQ

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-94391

    WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.

    Rustaurius Ultimate FAQ
  • Medium 4.3
    CVE-2025-67590

    WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate FAQ ultimate-faqs allows Cross Site Request Forgery.This issue affects Ultimate FAQ: from n/a through <= 2.4.3.

    Rustaurius Ultimate FAQ