WordPress Plugin Vulnerabilities

Ultimate FAQ < 1.8.25 - Unauthenticated Options Import/Export

Description

The Ultimate FAQ – WordPress Q&A Plugin WordPress plugin was affected by an Unauthenticated Options Import/Export security vulnerability.

Affects Plugins

Plugin icon
ultimate-faqs
Fixed in 1.8.25

References

CVE
CVE-2019-17233
CVE
CVE-2019-17232
URL
https://blog.nintechnet.com/unauthenticated-options-import-vulnerability-in-wordpress-ultimate-faq-plugin/

Miscellaneous

Original Researcher
Jerome Bruandet
Verified
No
WPVDB ID
b32b5226-d845-4262-8d7a-3aba74677336

Timeline

Publicly Published
2019-09-20 (about 6 years ago)
Added
2019-09-20 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-09-17
Title
Google Maps Ready! 1.1.5 - CSRF & XSS
Published
2014-08-01
Title
Flash News - Multiple Vulnerabilities
Published
2020-01-14
Title
Real Estate 7 < 2.9.5 - Multiple Vulnerabilities
Published
2017-05-11
Title
Tracking Code Manager < 1.11.4 - Authenticated XSS, CSRF & DoS
Published
2014-11-15
Title
WP Support Plus Responsive Ticket System < 4.2 - Multiple Issues