WordPress Plugin Vulnerabilities

Ultimate Faqs < 1.8.22 - Cross-Site Scripting (XSS)

Description

The Ultimate FAQ – WordPress Q&A Plugin WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
ultimate-faqs
Fixed in 1.8.22

References

CVE
CVE-2019-15643

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
6aa029ea-fb04-4bf5-b771-68e463ea8ec7

Timeline

Publicly Published
2019-05-08 (about 6 years ago)
Added
2019-08-27 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-12-13
Title
My IDX Home Search < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2020-01-13
Title
Computer Repair Shop < 2.0 - Authenticated Stored XSS
Published
2024-04-29
Title
CPO Companion <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-07-04
Title
Video Gallery Block < 1.1.1 - Contributor+ Stored XSS
Published
2025-02-18
Title
Coaching Staffs < 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting