Etoilewebdesign Ultimate Faq — known CVE vulnerabilities

Every CVE whose affected-product data names Etoilewebdesign Ultimate Faq, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2019-17232 — CVSS 7.5 (high): Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options import.
• CVE-2019-15643 — CVSS 6.1 (medium): The ultimate-faqs plugin before 1.8.22 for WordPress has XSS.
• CVE-2019-17233 — CVSS 6.1 (medium): Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection.
• CVE-2020-7107 — CVSS 6.1 (medium): The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.
• CVE-2021-24968 — CVSS 5.7 (medium): The Ultimate FAQ WordPress plugin before 2.1.2 does not have capability and CSRF checks in the ewd_ufaq_welcome_add_faq and…